Ticket #10741: inc-ip-and-whois-lostpassword.patch

wp-login.php

@@ -159 +159 @@
         }
         $message = __('Someone has asked to reset the password for the following site and username.') . "\r\n\r\n";
         $message .= get_option('siteurl') . "\r\n\r\n";
-        $message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
+        $message .= sprintf(__('Username: %s'), $user_login) . "\r\n";
+        $message .= sprintf(__('User\'s IP: %s (WHOIS: http://whois.domaintools.com/%1$s)'), $_SERVER['REMOTE_ADDR']) . "\r\n\r\n";
         $message .= __('To reset your password visit the following address, otherwise just ignore this email and nothing will happen.') . "\r\n\r\n";
         $message .= site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . "\r\n";