From 71f186ab34b9a2d35cab61beabc923edd1422ed4 Mon Sep 17 00:00:00 2001 From: champsupertramp Date: Tue, 26 Jul 2016 10:15:14 +0800 Subject: [PATCH] Remove nonce and http referer from submitted user details --- core/um-short-functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/um-short-functions.php b/core/um-short-functions.php index 639386f2..5341db15 100644 --- a/core/um-short-functions.php +++ b/core/um-short-functions.php @@ -364,7 +364,7 @@ function um_user_ip() { $v = um_user_uploads_uri() . $file; } - if ( !strstr( $k, 'user_pass' ) && $k != 'g-recaptcha-response' && $k != 'request' ) { + if ( !strstr( $k, 'user_pass' ) && ! in_array( $k, array('g-recaptcha-response','request','_wpnonce','_wp_http_referer') ) ) { if ( is_array($v) ) { $v = implode(',', $v );