Changeset 803811

Timestamp:

11/13/2013 02:04:35 PM (12 years ago)

Author:

migueluy

Message:

Jetpack: Contact Form: Remove nonsense nonce.
Fixes #1859
Props @iandunn

File:

• jetpack/trunk/modules/contact-form/grunion-contact-form.php (modified) (2 diffs)

jetpack/trunk/modules/contact-form/grunion-contact-form.php

@@ -136 +136 @@
         $id = stripslashes( $_POST['contact-form-id'] );
 
-        check_admin_referer( "contact-form_{$id}" );
+        if ( is_user_logged_in() ) {
+            check_admin_referer( "contact-form_{$id}" );
+        }
 
         $is_widget = 0 === strpos( $id, 'widget-' );
@@ -877 +879 @@
             $r .= "\t<p class='contact-submit'>\n";
             $r .= "\t\t<input type='submit' value='" . esc_attr( $form->get_attribute( 'submit_button_text' ) ) . "' class='pushbutton-wide'/>\n";
-            $r .= "\t\t" . wp_nonce_field( 'contact-form_' . $id, '_wpnonce', true, false ) . "\n"; // nonce and referer
+            if ( is_user_logged_in() ) {
+                $r .= "\t\t" . wp_nonce_field( 'contact-form_' . $id, '_wpnonce', true, false ) . "\n"; // nonce and referer
+            }
             $r .= "\t\t<input type='hidden' name='contact-form-id' value='$id' />\n";
             $r .= "\t\t<input type='hidden' name='action' value='grunion-contact-form' />\n";