Changeset 35618 for trunk/src/wp-includes/user-functions.php

Timestamp:

11/11/2015 10:30:27 PM (9 years ago)

Author:

wonderboymusic

Message:

Users: in wp_insert_user(), when a password isn't provided and the user exists, ensure that the password isn't wiped out.

Adds unit test.

Props leewillis77.
Fixes #29880.

File:

• trunk/src/wp-includes/user-functions.php (modified) (2 diffs)

trunk/src/wp-includes/user-functions.php

@@ -1288 +1288 @@
 
         // hashed in wp_update_user(), plaintext if called directly
-        $user_pass = $userdata['user_pass'];
+        $user_pass = ! empty( $userdata['user_pass'] ) ? $userdata['user_pass'] : $old_user_data->user_pass;
     } else {
         $update = false;
@@ -1331 +1331 @@
     if ( in_array( $user_login, apply_filters( 'illegal_user_logins', array() ) ) ) {
         return new WP_Error( 'illegal_user_login', __( 'Sorry, that username is not allowed.' ) );
-    }   
+    }
 
     /*