From 0b921efe381d1b975ce7761f7a9dbb38e3ec6668 Mon Sep 17 00:00:00 2001 From: Sergey Biryukov Date: Tue, 8 Jul 2014 17:17:14 +0000 Subject: [PATCH] Use wp_hash() instead of AUTH_KEY in WP_Customize_Widgets::get_instance_hash_key(). props juliobox. fixes #28783. Built from https://develop.svn.wordpress.org/trunk@29028 git-svn-id: http://core.svn.wordpress.org/trunk@28816 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/class-wp-customize-widgets.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/wp-includes/class-wp-customize-widgets.php b/wp-includes/class-wp-customize-widgets.php index 73e2a7843d..ccef22ee3a 100644 --- a/wp-includes/class-wp-customize-widgets.php +++ b/wp-includes/class-wp-customize-widgets.php @@ -1138,8 +1138,7 @@ final class WP_Customize_Widgets { * @return string Widget instance's hash key. */ protected function get_instance_hash_key( $instance ) { - $hash = md5( AUTH_KEY . serialize( $instance ) ); - return $hash; + return wp_hash( serialize( $instance ) ); } /**