Make WordPress Core


Ignore:
Timestamp:
07/29/2013 03:23:51 AM (12 years ago)
Author:
nacin
Message:

Remove "special" multisite spam check in the authentication API.

The spamming of a site no longer directly affects a user of said site.

Moves the spam check to the wp_authenticate filter. Networks in need
of enhanced spam-fighting should leverage this same technique.

Allow is_user_spammy() to accept a WP_User object.

props willnorris, brianhogg.
fixes #24771. see #19714.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/default-filters.php

    r24738 r24848  
    300300add_filter( 'heartbeat_nopriv_received', 'wp_auth_check', 10, 2 );
    301301
     302// Default authentication filters
     303add_filter( 'authenticate', 'wp_authenticate_username_password',  20, 3 );
     304add_filter( 'authenticate', 'wp_authenticate_spam_check',         99    );
     305
    302306unset($filter, $action);
Note: See TracChangeset for help on using the changeset viewer.