Take a look at the verify_request method of the PuSHPress class in the class-pushpress.php file.
On Sun, Mar 7, 2010 at 4:42 AM, James Holderness <[email protected]> wrote: > I just looked at the code for the PuSHPress plugin (don't know whether > that is the same code that Wordpress.com uses) and it looks to me like > it does no verification when receiving an unsubscribe request. That > seems like a fairly serious flaw to me. Or have I misunderstood the > way the code works? -- Joseph Scott [email protected] http://josephscott.org/
