Use add_option for atomic fallback secret creation

mrcasual · mrcasual · commit 4a31c892c49f · 2026-03-06T06:50:10.000-05:00
diff --git a/includes/class-gf-zero-spam-token.php b/includes/class-gf-zero-spam-token.php
@@ -162,7 +162,9 @@ public static function get_site_secret( int $salt_version ): string {
 			if ( ! $fallback ) {
 				$fallback = wp_generate_password( 64, true, true );
 
-				update_option( 'gf_zero_spam_fallback_secret', $fallback, false );
+				if ( ! add_option( 'gf_zero_spam_fallback_secret', $fallback, '', false ) ) {
+					$fallback = get_option( 'gf_zero_spam_fallback_secret' );
+				}
 			}
 
 			$auth_key        = $fallback;

Original file line number	Diff line number	Diff line change
`@@ -162,7 +162,9 @@ public static function get_site_secret( int $salt_version ): string {`
`162`	`162`	`if ( ! $fallback ) {`
`163`	`163`	`$fallback = wp_generate_password( 64, true, true );`
`164`	`164`
`165`		`- update_option( 'gf_zero_spam_fallback_secret', $fallback, false );`
	`165`	`+ if ( ! add_option( 'gf_zero_spam_fallback_secret', $fallback, '', false ) ) {`
	`166`	`+ $fallback = get_option( 'gf_zero_spam_fallback_secret' );`
	`167`	`+ }`
`166`	`168`	`}`
`167`	`169`
`168`	`170`	`$auth_key = $fallback;`