WordPress.org

Make WordPress Core

Changeset 36503


Ignore:
Timestamp:
02/07/2016 01:25:44 PM (6 years ago)
Author:
ocean90
Message:

Users: Use self_admin_url() for the email change confirmation link.

Prevents sending users to wp-admin/profile.php if they only have access to wp-admin/user/profile.php.

Fixes #35766.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/ms.php

    r36416 r36503  
    310310    $current_user = wp_get_current_user();
    311311    $content = str_replace( '###USERNAME###', $current_user->user_login, $content );
    312     $content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'options.php?adminhash='.$hash ) ), $content );
     312    $content = str_replace( '###ADMIN_URL###', esc_url( self_admin_url( 'options.php?adminhash='.$hash ) ), $content );
    313313    $content = str_replace( '###EMAIL###', $value, $content );
    314314    $content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );
Note: See TracChangeset for help on using the changeset viewer.