Make WordPress Core


Ignore:
Timestamp:
09/14/2015 01:02:03 PM (9 years ago)
Author:
ocean90
Message:

Passwords: Deprecate second parameter of wp_new_user_notification().

The second parameter $plaintext_pass was removed in [33023] and restored as $notify in [33620] with a different behavior. If you have a plugin overriding wp_new_user_notification() which hasn't been updated you would get a notification with your username and the password "both".
To prevent this the second parameter is now deprecated and reintroduced as the third parameter.

Adds unit tests.

Merge of [34116] to the 4.3 branch.

Props kraftbj, adamsilverstein, welcher, ocean90.
See #33654.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/4.3/src/wp-includes/pluggable.php

    r34053 r34118  
    16901690 * @since 2.0.0
    16911691 * @since 4.3.0 The `$plaintext_pass` parameter was changed to `$notify`.
     1692 * @since 4.3.1 The `$plaintext_pass` parameter was deprecated. `$notify` added as a third parameter.
    16921693 *
    16931694 * @global wpdb         $wpdb      WordPress database object for queries.
    16941695 * @global PasswordHash $wp_hasher Portable PHP password hashing framework instance.
    16951696 *
    1696  * @param int    $user_id User ID.
    1697  * @param string $notify  Whether admin and user should be notified ('both') or
    1698  *                        only the admin ('admin' or empty).
    1699  */
    1700 function wp_new_user_notification( $user_id, $notify = '' ) {
     1697 * @param int    $user_id    User ID.
     1698 * @param null   $deprecated Not used (argument deprecated).
     1699 * @param string $notify     Optional. Type of notification that should happen. Accepts 'admin' or an empty
     1700 *                           string (admin only), or 'both' (admin and user). The empty string value was kept
     1701 *                           for backward-compatibility purposes with the renamed parameter. Default empty.
     1702 */
     1703function wp_new_user_notification( $user_id, $deprecated = null, $notify = '' ) {
     1704    if ( $deprecated !== null ) {
     1705        _deprecated_argument( __FUNCTION__, '4.3.1' );
     1706    }
     1707
    17011708    global $wpdb, $wp_hasher;
    17021709    $user = get_userdata( $user_id );
Note: See TracChangeset for help on using the changeset viewer.