Make WordPress Core


Ignore:
Timestamp:
11/20/2014 01:39:21 PM (7 years ago)
Author:
nacin
Message:

Invalidate password keys when a user's email changes.

Merges [30430] to the 4.0 branch.

Location:
branches/4.0
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.0

  • branches/4.0/src/wp-includes/user.php

    r29635 r30431  
    18191819
    18201820    if ( $update ) {
     1821        if ( $user_email !== $old_user_data->user_email ) {
     1822            $data['user_activation_key'] = '';
     1823        }
    18211824        $wpdb->update( $wpdb->users, $data, compact( 'ID' ) );
    18221825        $user_id = (int) $ID;
Note: See TracChangeset for help on using the changeset viewer.