Changeset 6787

Timestamp:

02/27/2018 03:10:08 AM (7 years ago)

Author:

dd32

Message:

2FA: Remove reminents of wp-auth-nonce.

See #77.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-two-factor/wporg-two-factor.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-two-factor/wporg-two-factor.php

@@ -278 +278 @@
             <form name="validate_2fa_form" id="loginform" action="<?php echo esc_url( set_url_scheme( add_query_arg( 'action', 'validate_2fa', $wp_login_url ), 'login_post' ) ); ?>" method="post" autocomplete="off">
                 <input type="hidden" name="provider"      id="provider"      value="<?php echo esc_attr( $provider_class ); ?>" />
-                <input type="hidden" name="wp-auth-id"    id="wp-auth-id"    value="<?php echo esc_attr( $user->ID ); ?>" />
-                <input type="hidden" name="wp-auth-nonce" id="wp-auth-nonce" value="<?php echo esc_attr( $login_nonce ); ?>" />
                 <?php if ( $interim_login ) : ?>
                     <input type="hidden" name="interim-login" value="1" />
@@ -296 +294 @@
                 'action'        => 'backup_2fa',
                 'provider'      => $backup_classname,
-                'wp-auth-id'    => $user->ID,
-                'wp-auth-nonce' => $login_nonce,
                 'redirect_to'   => $redirect_to,
                 'rememberme'    => $rememberme,