Changeset 762552

Timestamp:

08/26/2013 06:33:49 PM (11 years ago)

Author:

tmoorewp

Message:

Jetpack: Subscriptions: Run the nonce function for all users, not just logged in users, on the subscriptions widget.

File:

• jetpack/trunk/modules/subscriptions.php (modified) (4 diffs)

jetpack/trunk/modules/subscriptions.php

@@ -371 +371 @@
     function widget_submit() {
         // Check the nonce.
-        if ( is_user_logged_in() ) {
-            check_admin_referer( 'blogsub_subscribe_' . get_current_blog_id() );
-        }
+        check_admin_referer( 'blogsub_subscribe_' . get_current_blog_id() );
 
         if ( empty( $_REQUEST['email'] ) )
@@ -532 +530 @@
         $source = 'widget';
 
-        extract( $args );
-
         $instance               = wp_parse_args( (array) $instance, $this->defaults() );
         $title                  = isset( $instance['title'] )               ? stripslashes( $instance['title'] )               : '';
@@ -546 +542 @@
 
         echo $args['before_widget'];
-        echo $args['before_title'] . '<label for="subscribe-field">' . esc_attr( $instance['title'] ) . '</label>' . $args['after_title'] . "\n";
+        echo $args['before_title'] . '<label for="subscribe-field">' . esc_attr(  ) . '</label>' . $args['after_title'] . "\n";
 
         $referer = ( is_ssl() ? 'https' : 'http' ) . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
@@ -596 +592 @@
                 <input type="hidden" name="sub-type" value="<?php echo esc_attr( $source ); ?>" />
                 <input type="hidden" name="redirect_fragment" value="<?php echo esc_attr( $widget_id ); ?>" />
-                <?php
-                    if ( is_user_logged_in() ) {
-                        wp_nonce_field( 'blogsub_subscribe_'. get_current_blog_id(), '_wpnonce', false );
-                    }
-                ?>
+                <?php wp_nonce_field( 'blogsub_subscribe_'. get_current_blog_id(), '_wpnonce', false ); ?>
                 <input type="submit" value="<?php echo esc_attr( $subscribe_button ); ?>" name="jetpack_subscriptions_widget" />
             </p>