WordPress.org

Make WordPress Core

Changeset 2438


Ignore:
Timestamp:
03/13/2005 05:15:56 PM (17 years ago)
Author:
ryan
Message:

Check for empty password reset key. http://mosquito.wordpress.org/view.php?id=1080 Props: idanso

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-login.php

    r2437 r2438  
    126126    // Generate something random for a password... md5'ing current time with a rand salt
    127127    $key = $_GET['key'];
     128    if ( empty($key) )
     129        die( __('Sorry, that key does not appear to be valid.') );
    128130    $user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_activation_key = '$key'");
    129131    if ( !$user )
     
    131133
    132134    do_action('password_reset');
     135echo "doing password reset for : {$user->user_login}<br/>";
     136exit;
     137
    133138
    134139    $new_pass = substr( md5( uniqid( microtime() ) ), 0, 7);
Note: See TracChangeset for help on using the changeset viewer.