Make WordPress Core


Ignore:
Timestamp:
07/27/2017 02:09:51 AM (8 years ago)
Author:
johnbillion
Message:

Users: Require a confirmation link in an email to be clicked when a user attempts to change their email address.

This adds this previously Multisite-only functionality to single site installations too. This change prevents accidental or erroneous email address changes from potentially locking users out of their account.

Props rodrigosprimo, tharsheblows, johnbillion

Fixes #16470

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/admin-filters.php

    r38172 r41163  
    100100
    101101add_action( 'admin_notices', 'default_password_nag' );
     102add_action( 'admin_notices', 'new_user_email_admin_notice' );
    102103
    103104add_action( 'profile_update', 'default_password_nag_edit_user', 10, 2 );
     105
     106add_action( 'personal_options_update', 'send_confirmation_on_profile_email' );
    104107
    105108// Update hooks.
Note: See TracChangeset for help on using the changeset viewer.