Changeset 30431 for branches/4.0/src/wp-includes/user.php

Timestamp:

11/20/2014 01:39:21 PM (10 years ago)

Author:

nacin

Message:

Invalidate password keys when a user's email changes.

Merges [30430] to the 4.0 branch.

Location:

branches/4.0

Files:

• . (modified) (1 prop)
• src/wp-includes/user.php (modified) (1 diff)

branches/4.0/src/wp-includes/user.php

@@ -1819 +1819 @@
 
     if ( $update ) {
+        if ( $user_email !== $old_user_data->user_email ) {
+            $data['user_activation_key'] = '';
+        }
         $wpdb->update( $wpdb->users, $data, compact( 'ID' ) );
         $user_id = (int) $ID;