Changeset 2438

Timestamp:

03/13/2005 05:15:56 PM (20 years ago)

Author:

ryan

Message:

Check for empty password reset key. ​http://mosquito.wordpress.org/view.php?id=1080 Props: idanso

File:

• trunk/wp-login.php (modified) (2 diffs)

trunk/wp-login.php

@@ -126 +126 @@
     // Generate something random for a password... md5'ing current time with a rand salt
     $key = $_GET['key'];
+    if ( empty($key) )
+        die( __('Sorry, that key does not appear to be valid.') );
     $user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_activation_key = '$key'");
     if ( !$user )
@@ -131 +133 @@
 
     do_action('password_reset');
+echo "doing password reset for : {$user->user_login}<br/>";
+exit;
+
 
     $new_pass = substr( md5( uniqid( microtime() ) ), 0, 7);