PluginProbe
Patchstack – WordPress & Plugins Security / 2.1.25
Patchstack – WordPress & Plugins Security v2.1.25
2.3.7 trunk 2.1.0 2.1.1 2.1.10 2.1.11 2.1.12 2.1.13 2.1.14 2.1.15 2.1.16 2.1.17 2.1.18 2.1.19 2.1.2 2.1.20 2.1.21 2.1.22 2.1.23 2.1.24 2.1.25 2.1.3 2.1.4 2.1.5 2.1.6 All 49 releases
← All changes | includes/core.php +2 -2 2.1.242.1.25 View file →
@@ -351,9 +351,9 @@
351 351 * @param string $message
352 352 * @return array
353 353 */
354 354 public function encrypt( $message ) {
355 - if ( is_null( $message ) ) {
355 + if ( is_null( $message ) || ! defined( 'AUTH_KEY' ) ) {
356 356 return [
357 357 'cipher' => $message,
358 358 'nonce' => ''
359 359 ];
@@ -399,9 +399,9 @@
399 399 public function decrypt( $cipher, $nonce ) {
400 400 $enc_type = $this->get_enc_type();
401 401
402 402 // If we received an empty nonce, we assume it was never properly encrypted to begin with.
403 - if ( $nonce == '' ) {
403 + if ( $nonce == '' || ! defined( 'AUTH_KEY' ) ) {
404 404 return $cipher;
405 405 }
406 406
407 407 try {