Changeset 10189

Timestamp:

08/19/2020 07:28:11 AM (3 years ago)

Author:

tellyworth

Message:

Plugin dir: prevent false trigger of the Test button.

See #5303.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-block-validator.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/shortcodes/class-block-validator.php

@@ -146 +146 @@
     protected static function handle_test() {
         $post = get_post( intval( $_POST['plugin-id'] ) );
-        if ( $post && wp_verify_nonce( $_POST['block-directory-nonce'], 'block-directory-test-' . $post->ID ) ) {
+        if ( $post && 'test' === $_POST['block-directory-test'] && wp_verify_nonce( $_POST['block-directory-nonce'], 'block-directory-test-' . $post->ID ) ) {
             if ( wp_cache_get( "plugin-e2e-test-{$post->ID}", 'plugin-test' ) ) {
                 echo '<div class="notice notice-warning notice-alt"><p>' . __( 'Test already in progress.', 'wporg-plugins' ) . '</p></div>';