• Visiting a URL in WP that a) is an admin page and b) has confirmed=1 in the URL results in “The link you followed has expired”.

    This is because Events Manager is calling em_options_save on admin_init. Backtrace is below.

    Instead of firing unconditionally on admin_init, could the code confirm that the admin page in question belongs to Events Manager? Besides the bug, it adds processing/RAM overhead and increases attack surface.

    em_admin_update_timezone_backcompat (/home/jon/local/mysite/web/wp-content/plugins/events-manager/admin/settings/updates/timezone-backcompat.php:17)
    WP_Hook->apply_filters (/home/jon/local/mysite/web/wp-includes/class-wp-hook.php:324)
    WP_Hook->do_action (/home/jon/local/mysite/web/wp-includes/class-wp-hook.php:348)
    do_action (/home/jon/local/mysite/web/wp-includes/plugin.php:517)
    em_options_save (/home/jon/local/mysite/web/wp-content/plugins/events-manager/admin/em-options.php:344)
    WP_Hook->apply_filters (/home/jon/local/mysite/web/wp-includes/class-wp-hook.php:324)
    WP_Hook->do_action (/home/jon/local/mysite/web/wp-includes/class-wp-hook.php:348)
    do_action (/home/jon/local/mysite/web/wp-includes/plugin.php:517)
    {main} (/home/jon/local/mysite/web/wp-admin/admin.php:175)

    The page I need help with: [log in to see the link]

  • The topic ‘“The link you followed has expired” when I’m not in Events Manager’ is closed to new replies.