From f0bde0c94515bab71884c2861e5fdc855a1a299b Mon Sep 17 00:00:00 2001 From: Sergey Biryukov Date: Tue, 8 Jul 2014 17:16:26 +0000 Subject: [PATCH] Use wp_hash() instead of AUTH_KEY in WP_Customize_Widgets::get_instance_hash_key(). props juliobox. fixes #28783. git-svn-id: https://develop.svn.wordpress.org/trunk@29028 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-includes/class-wp-customize-widgets.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/wp-includes/class-wp-customize-widgets.php b/src/wp-includes/class-wp-customize-widgets.php index 73e2a7843d..ccef22ee3a 100644 --- a/src/wp-includes/class-wp-customize-widgets.php +++ b/src/wp-includes/class-wp-customize-widgets.php @@ -1138,8 +1138,7 @@ final class WP_Customize_Widgets { * @return string Widget instance's hash key. */ protected function get_instance_hash_key( $instance ) { - $hash = md5( AUTH_KEY . serialize( $instance ) ); - return $hash; + return wp_hash( serialize( $instance ) ); } /**