Make WordPress Core


Ignore:
Timestamp:
11/20/2014 01:39:03 PM (9 years ago)
Author:
nacin
Message:

Invalidate password keys when a user's email changes.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/user.php

    r30328 r30430  
    18861886
    18871887    if ( $update ) {
     1888        if ( $user_email !== $old_user_data->user_email ) {
     1889            $data['user_activation_key'] = '';
     1890        }
    18881891        $wpdb->update( $wpdb->users, $data, compact( 'ID' ) );
    18891892        $user_id = (int) $ID;
Note: See TracChangeset for help on using the changeset viewer.