WordPress.org
Get WordPress

Plugin Directory

Changeset 832258


Ignore:
Timestamp:
01/03/2014 02:21:15 PM (12 years ago)
Author:
pntrinh
Message:

fix security

File:
1 edited

Legend:

Unmodified
Added
Removed

  • tr-cache-and-security/trunk/inc/tr_security_class.php

    r813057 r832258  
    207207            //check ban login username
    208208            $log = get_user_meta($loginuser->ID, '_tr_security', true);
    209             if ($options['max_login_user'] > 0 && $log['login_failed'] >= $options['max_login_user']) {
     209            if ($options['max_login_user'] > 0 && @$log['login_failed'] >= $options['max_login_user']) {
    210210                if ($log['login_failed_time'] > $current_time - $options['login_time_period'] *
    211211                    60) {
    … …  
    438438            $codecheck = wp_generate_password(12,false);
    439439            $_SESSION['tr_sec_auto_codecheck'] = $codecheck;
    440             $url = site_url().$_SERVER['REQUEST_URI'];
    441             $url = $url . ((strpos($url,'?')===false)? '?':'&'). 'cc='.$codecheck;
     440            //$url = site_url().$_SERVER['REQUEST_URI'];
     441            $url = add_query_arg('cc',$codecheck);
     442            //$url = $url . ((strpos($url,'?')===false)? '?':'&'). 'cc='.$codecheck;
    442443           
    443444            if(strtolower($_SERVER['REQUEST_METHOD'])=='post')
Note: See TracChangeset for help on using the changeset viewer.