This page is READ-ONLY. It is generated from the old site.
All timestamps are relative to 2013 (when this page is generated).
If you are looking for TeX support, please go to VietTUG.org

wordpress 2.8.3: remote admin reset password

Added by over 3 years ago

Full Disclosure: WordPress

My fixation

$ diff old/wp-login.php new/wp-login.php 
187a188,190
>       if (!is_string($key))
>               return new WP_Error('invalid_key', __('Invalid key'));
>

Fixation by Wordpress Team

--- /branches/2.8/wp-login.php (revision 11514)
+++ /branches/2.8/wp-login.php (revision 11798)
@@ -188,5 +188,5 @@
        $key = preg_replace('/[^a-z0-9]/i', '', $key);

-       if ( empty( $key ) )
+       if ( empty( $key ) || is_array( $key ) )
                return new WP_Error('invalid_key', __('Invalid key'));


Comments