Changeset 37316

Timestamp:

04/27/2016 05:35:37 AM (9 years ago)

Author:

jeremyfelt

Message:

Users: Provide a full user object when checking for a spammy multisite user

is_user_spammy() falls back to the current user if one is not provided. There is no current user during authentication, so the result is always false. Pass a user to fill the void.

Adds tests for wp_authenticate_spam_check().

Props websupporter.
Fixes #36546.

Location:

trunk

Files:

• src/wp-includes/user.php (modified) (1 diff)
• tests/phpunit/tests/user/wpAuthenticateSpamCheck.php (added)

trunk/src/wp-includes/user.php

@@ -303 +303 @@
          * @param WP_User $user    User to check against.
          */
-        $spammed = apply_filters( 'check_is_user_spammed', is_user_spammy(), $user );
+        $spammed = apply_filters( 'check_is_user_spammed', is_user_spammy( $user ), $user );
 
         if ( $spammed )