Changeset 4361

Timestamp:

11/08/2012 08:23:37 AM (13 years ago)

Author:

johnjamesjacoby

Message:

Add filter to bbp_verify_nonce_request() to allow hot-swapping of the request match.

File:

• trunk/includes/common/functions.php (modified) (2 diffs)

trunk/includes/common/functions.php

@@ -1408 +1408 @@
 
     // Get the home URL
-    $home_url = strtolower( home_url() );
+    $home_url      = strtolower( home_url() );
 
     // Build the currently requested URL
@@ -1414 +1414 @@
     $requested_url = strtolower( $scheme . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
 
+    // Filter the requested URL, for configurations like reverse proxying
+    $matched_url   = apply_filters( 'bbp_verify_nonce_request_url', $requested_url );
+
     // Check the nonce
     $result = isset( $_REQUEST[$query_arg] ) ? wp_verify_nonce( $_REQUEST[$query_arg], $action ) : false;
 
     // Nonce check failed
-    if ( empty( $result ) || empty( $action ) || ( strpos( $requested_url, $home_url ) !== 0 ) )
+    if ( empty( $result ) || empty( $action ) || ( strpos( $matched_url, $home_url ) !== 0 ) )
         $result = false;