Changeset 21923

Timestamp:

09/20/2012 11:01:29 AM (12 years ago)

Author:

westi

Message:

Passwords: Make it possible for plugins to enforce extra password strength / validity rules during the reset process.

Adds a filter in the password reset process so that a plugin can enforce particular password rules on users to compliment the existing filtering in the Profile modification process.
Fixes #21778.

File:

• trunk/wp-login.php (modified) (1 diff)

trunk/wp-login.php

@@ -460 +460 @@
     }
 
-    $errors = '';
-
-    if ( isset($_POST['pass1']) && $_POST['pass1'] != $_POST['pass2'] ) {
-        $errors = new WP_Error('password_reset_mismatch', __('The passwords do not match.'));
-    } elseif ( isset($_POST['pass1']) && !empty($_POST['pass1']) ) {
+    $errors = new WP_Error();
+
+    if ( isset($_POST['pass1']) && $_POST['pass1'] != $_POST['pass2'] )
+        $errors->add( 'password_reset_mismatch', __( 'The passwords do not match.' ) );
+
+    do_action( 'validate_password_reset', $errors, $user );
+
+    if ( ( ! $errors->get_error_code() ) && isset( $_POST['pass1'] ) && !empty( $_POST['pass1'] ) ) {
         reset_password($user, $_POST['pass1']);
         login_header( __( 'Password Reset' ), '<p class="message reset-pass">' . __( 'Your password has been reset.' ) . ' <a href="' . esc_url( wp_login_url() ) . '">' . __( 'Log in' ) . '</a></p>' );