WordPress/wp-includes
Dion Hulse a579aad05b XMLRPC: Prevent authentication from occuring after a failed authentication attmept in any single XML-RPC call.
This hardens WordPress against a common vector which uses multiple user identifiers in a single `system.multicall` call. In the event that authentication fails, all following authentication attempts ''in that call'' will also fail.

Props dd32, johnbillion.
Fixes #34336

Built from https://develop.svn.wordpress.org/trunk@35366


git-svn-id: http://core.svn.wordpress.org/trunk@35331 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-10-23 04:46:24 +00:00
..
2015-10-21 18:36:28 +00:00
2015-10-21 20:38:26 +00:00
2015-10-21 16:26:42 +00:00
2015-09-26 07:04:28 +00:00
2015-09-26 07:04:28 +00:00
2015-09-22 13:44:25 +00:00
2015-10-08 19:29:25 +00:00
2015-10-07 03:02:23 +00:00
2015-10-21 20:38:26 +00:00
2015-10-23 04:22:26 +00:00
2015-10-08 19:29:25 +00:00
2015-10-10 01:59:29 +00:00
2015-09-22 13:03:24 +00:00
2015-10-22 21:45:25 +00:00