Remove nonce and http referer from submitted user details

This commit is contained in:
champsupertramp
2016-07-26 10:15:14 +08:00
parent 56a3e96d76
commit 71f186ab34
+1 -1
View File
@@ -364,7 +364,7 @@ function um_user_ip() {
$v = um_user_uploads_uri() . $file;
}
if ( !strstr( $k, 'user_pass' ) && $k != 'g-recaptcha-response' && $k != 'request' ) {
if ( !strstr( $k, 'user_pass' ) && ! in_array( $k, array('g-recaptcha-response','request','_wpnonce','_wp_http_referer') ) ) {
if ( is_array($v) ) {
$v = implode(',', $v );