Changeset 34107

Timestamp:

09/14/2015 02:44:41 AM (9 years ago)

Author:

boonebgorges

Message:

Send password-change email notifications via hook.

wp_password_change_notification() is now called at the 'after_password_reset'
action, rather than being invoked directly from the reset_password() function.

In order to make it possible to call wp_password_change_notification() as a
do_action() callback, the function signature has to be changed so that the
$user parameter is expected to be a value rather than a reference. Since
PHP 5.0, objects are passed by reference, so &$user was unnecessary anyway.

Props dshanske, thomaswm.
See #33587.

Location:

trunk/src/wp-includes

Files:

• default-filters.php (modified) (1 diff)
• pluggable.php (modified) (1 diff)
• user-functions.php (modified) (1 diff)

trunk/src/wp-includes/default-filters.php

@@ -338 +338 @@
 add_action( 'comment_post', 'wp_new_comment_notify_moderator', 10, 2 );
 add_action( 'comment_post', 'wp_new_comment_notify_postauthor' );
+add_action( 'after_password_reset', 'wp_password_change_notification' );
 
 /**

trunk/src/wp-includes/pluggable.php

@@ -1668 +1668 @@
  * @since 2.7.0
  *
- * @param object $user User Object
- */
-function wp_password_change_notification(&$user) {
+ * @param WP_User $user User object.
+ */
+function wp_password_change_notification( $user ) {
     // send a copy of password change notification to the admin
     // but check to see if it's the admin whose password we're changing, and skip this

trunk/src/wp-includes/user-functions.php

@@ -1917 +1917 @@
     update_user_option( $user->ID, 'default_password_nag', false, true );
 
-    wp_password_change_notification( $user );
+    /**
+     * Fires after the user's password is reset.
+     *
+     * @since 4.4.0
+     *
+     * @param object $user     The user.
+     * @param string $new_pass New user password.
+     */
+    do_action( 'after_password_reset', $user, $new_pass );
 }