please stop using referer on "Check for Spam" (akismet recheck queue)

  • _ck_

    (@_ck_)


    11 years, 7 months ago

    I’ve been waiting years for them to fix this, I guess I have to make a formal request.

    Akismet is the only part of WordPress that still relies on browser referer to redirect, specifically the “Check for Spam” button, ie. /wp-admin/admin.php?action=akismet_recheck_queue

    This fails in many browsers because of personal security firewalls/antivirus packages that block browser referer.

    Around line 692 in admin.php

    wp_redirect( $_SERVER['HTTP_REFERER'] );

    Please either pass the old url or return them to the only logical place the function call could have been from, /wp-admin/edit-comments.php – and/or first check if the referer is valid or even exists.

  • The topic ‘please stop using referer on "Check for Spam" (akismet recheck queue)’ is closed to new replies.

Tags