Ticket #2734 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

Nonce confirmation not informative.

Reported by: mdawaffe Assigned to: anonymous
Priority: normal Milestone:
Component: Administration Version: 2.0.3
Severity: normal Keywords: nonce bg|has-patch bg|2nd-opinion
Cc:

Description

The current confirmation message is just a Yes/No without any information about what's happening. Trying to write code that would tell the user exactly what's happening in this dialog would be expensive especially considering that this dialog will only rarely be seen.

We can, however, give some context.

The attached includes admin-header.php (and admin-footer.php) in the confirmation screen and tweaks the menu and submenu identifiers in a few files so that the confirmation is always displayed with the right menu highlighting and the right submenu.

The patch calls a lot more code and a lot more hooks than the current dialog does, which may be something to think about with regard to security.

Attachments

2734.diff (5.5 kB) - added by mdawaffe on 05/18/06 05:56:01.
Non-informative yet more contextual confirmation
2734b.diff (32.0 kB) - added by mdawaffe on 05/18/06 20:00:48.
verbs and nouns and names, oh my!

Change History

05/18/06 05:56:01 changed by mdawaffe

  • attachment 2734.diff added.

Non-informative yet more contextual confirmation

05/18/06 06:47:35 changed by ryan

The only thing I can think of is that plugins that attach to the header or footer and do things such as add fields to forms might trigger since everything seems to be normal from their perspective. Maybe we should disable certain action and filter hooks when processing a nonce verification.

I'll go ahead and commit, and we can take it from there. Right now the dialog is so uninformative that people will probably just push Yes out of annoyance. This change should help. Maybe we could do a little something with the action name since it contains some information about what is being nonced. "delete-post1234"

05/18/06 06:49:44 changed by ryan

[3783]

05/18/06 20:00:14 changed by mdawaffe

I'd thought of that, but it didn't seem worth it.

But I thought about it again and here it is.

2734b.diff

  1. Change nonce actions to 'verb-noun_ID': 'delete-post_1234', 'switch-theme_classic'. This was no easier to parse than 'delete_post1234' but much easier than 'switch-themeclassic'.
  2. If check_admin_referer() fails, an array of known verbs and an array of known nouns (and what function to call on ID, if any) is built. Both arrays try to be sensitive to i18n. If we have a known verb and noun pair, the AYS is made more specific: 'Are you sure you want to delete this post: "WP rocks"?', 'Are you sure you want to switch to this theme?'.

05/18/06 20:00:48 changed by mdawaffe

  • attachment 2734b.diff added.

verbs and nouns and names, oh my!

05/18/06 21:08:50 changed by mdawaffe

If we do end up changing the nonce action names, we'll have to backport. We don't want them to change between releases.

05/26/06 23:33:09 changed by ryan

[3804] and [3805] for renamed action strings. check_admin_referer() changes not in yet.

06/15/06 07:47:10 changed by ryan

Ideally, verb noun pairs would map to a sentence that has the verb and noun hardcoded. 

__('Are you sure you want to delete category %s')

The nouns and verbs need the context of the entire sentence for proper translation. Also, we should move the nonce decoder and AYS dialog code to a separate function so that plugin writers don't have to reproduce all of that when providing a custom check_admin_referer(). I have to cut-and-paste all of that stuff into the secure-admin plugin even though I just want to add one line to the top of the function.

06/27/06 08:09:41 changed by ryan

[3934] adds wp_nonce_ays() and wp_explain_nonce(). They're in functions.php for now, but could go in pluggable.php or in admin-functions.php since there is proboably no need of them outside of the admin. Might be nice to have pluggable functions that are only loaded for wp-admin so that we don't have to move admin-only functions into wp-includes to make them pluggable.

06/27/06 08:11:02 changed by ryan

BTW, not all nonce actions are accounted for in the translation table. Anyone want to finish them off?

06/27/06 09:33:10 changed by ryan

[3935] adds a few more.

06/27/06 22:58:28 changed by ryan

[3936] for 2.0.

06/27/06 22:58:43 changed by ryan

  • version changed from 2.1 to 2.0.3.
  • milestone changed from 2.1 to 2.0.4.

07/03/06 19:50:19 changed by ryan

  • status changed from new to closed.
  • resolution set to fixed.

11/30/06 19:41:50 changed by

  • milestone deleted.

Milestone 2.0.4 deleted