WordPress.org

Make WordPress Core


Ignore:
File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-login.php

    r11804 r11514  
    162162    $message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
    163163    $message .= __('To reset your password visit the following address, otherwise just ignore this email and nothing will happen.') . "\r\n\r\n";
    164     $message .= site_url("wp-login.php?action=rp&key=$key&login=" . rawurlencode($user_login), 'login') . "\r\n";
     164    $message .= site_url("wp-login.php?action=rp&key=$key", 'login') . "\r\n";
    165165
    166166    $title = sprintf(__('[%s] Password Reset'), get_option('blogname'));
     
    183183 * @return bool|WP_Error
    184184 */
    185 function reset_password($key, $login) {
     185function reset_password($key) {
    186186    global $wpdb;
    187187
    188188    $key = preg_replace('/[^a-z0-9]/i', '', $key);
    189189
    190     if ( empty( $key ) || !is_string( $key ) )
     190    if ( empty( $key ) )
    191191        return new WP_Error('invalid_key', __('Invalid key'));
    192192
    193     if ( empty($login) || !is_string($login) )
    194         return new WP_Error('invalid_key', __('Invalid key'));
    195 
    196     $user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s AND user_login = %s", $key, $login));
     193    $user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));
    197194    if ( empty( $user ) )
    198195        return new WP_Error('invalid_key', __('Invalid key'));
     
    374371case 'resetpass' :
    375372case 'rp' :
    376     $errors = reset_password($_GET['key'], $_GET['login']);
     373    $errors = reset_password($_GET['key']);
    377374
    378375    if ( ! is_wp_error($errors) ) {
Note: See TracChangeset for help on using the changeset viewer.