Changeset 6795 for sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-two-factor/wporg-two-factor.php

Timestamp:

02/27/2018 12:16:58 PM (7 years ago)

Author:

dd32

Message:

2FA: Fix a PHP notice during login where $_GET['action'] is not set.

H/T ocean90.
See #77.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-two-factor/wporg-two-factor.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-two-factor/wporg-two-factor.php

@@ -78 +78 @@
         if ( $login_host === $_SERVER['HTTP_HOST']  ) {
             if ( '/wp-login.php' == substr( $_SERVER['REQUEST_URI'], 0, 13 ) ) {
-                if ( $_POST || 'backup_2fa' == $_REQUEST['action'] || 'validate_2fa' == $_REQUEST['action'] ) {
+                if ( $_POST || ( isset( $_REQUEST['action'] ) && ( 'backup_2fa' == $_REQUEST['action'] || 'validate_2fa' == $_REQUEST['action'] ) ) ) {
                     return $user_id;
                 }