Making WordPress.org


Ignore:
Timestamp:
12/11/2024 05:36:31 AM (18 months ago)
Author:
dd32
Message:

Plugin Directory: Require 2FA verification to confirm a plugin release.

This replaces the email access links.
All plugin committers are required to have 2FA enabled now.

Closes https://github.com/WordPress/wordpress.org/pull/344.
Fixes #7704.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/class-template.php

    r14218 r14262  
    999999            array( '_wpnonce' => wp_create_nonce( 'wp_rest' ) ),
    10001000            $url
    1001         );
    1002     }
    1003 
    1004     /**
    1005      * Generates a link to email the release confirmation link.
    1006      *
    1007      * @param int|\WP_Post|null $post Optional. Post ID or post object. Defaults to global $post.
    1008      * @return string URL to enable confirmations.
    1009      */
    1010     public static function get_release_confirmation_access_link() {
    1011         return add_query_arg(
    1012             array( '_wpnonce' => wp_create_nonce( 'wp_rest' ) ),
    1013             home_url( 'wp-json/plugins/v1/release-confirmation-access' )
    10141001        );
    10151002    }
Note: See TracChangeset for help on using the changeset viewer.