WordPress.org

Make WordPress Core


Ignore:
Timestamp:
07/27/17 02:09:51 (6 months ago)
Author:
johnbillion
Message:

Users: Require a confirmation link in an email to be clicked when a user attempts to change their email address.

This adds this previously Multisite-only functionality to single site installations too. This change prevents accidental or erroneous email address changes from potentially locking users out of their account.

Props rodrigosprimo, tharsheblows, johnbillion

Fixes #16470

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/admin-filters.php

    r38172 r41163  
    100100 
    101101add_action( 'admin_notices', 'default_password_nag' ); 
     102add_action( 'admin_notices', 'new_user_email_admin_notice' ); 
    102103 
    103104add_action( 'profile_update', 'default_password_nag_edit_user', 10, 2 ); 
     105 
     106add_action( 'personal_options_update', 'send_confirmation_on_profile_email' ); 
    104107 
    105108// Update hooks. 
Note: See TracChangeset for help on using the changeset viewer.