From f995a3cb96d08077ffe9756c3bc96c0349ba8a65 Mon Sep 17 00:00:00 2001 From: Drew Jaynes Date: Mon, 31 Aug 2015 20:49:49 +0000 Subject: [PATCH] Docs: Clarify the DocBlock summary for `wp_create_nonce()` to mention that nonce-creation is also now dependent on user tokens, as of [29221]. Also adds a changelog entry for when user tokens were introduced into the nonce-creation process. Props ericlewis Fixes #33636. git-svn-id: https://develop.svn.wordpress.org/trunk@33827 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-includes/pluggable.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/wp-includes/pluggable.php b/src/wp-includes/pluggable.php index b755bdd851..7ac1cfc595 100644 --- a/src/wp-includes/pluggable.php +++ b/src/wp-includes/pluggable.php @@ -1831,9 +1831,11 @@ endif; if ( !function_exists('wp_create_nonce') ) : /** - * Creates a cryptographic token tied to a specific action, user, and window of time. + * Creates a cryptographic token tied to a specific action, user, user session, + * and window of time. * * @since 2.0.3 + * @since 4.0.0 Session tokens were integrated with nonce creation * * @param string|int $action Scalar value to add context to the nonce. * @return string The token.