Make WordPress Core


Ignore:
Timestamp:
07/27/2017 02:23:26 AM (8 years ago)
Author:
johnbillion
Message:

Options, Meta APIs: Send a notification to the old admin email address when the site admin email or network admin email address is changed.

This reduces the chances of a site compromise going unnoticed, in the same way that the same notifications for user account email address changes reduces the chances of a user account compromise going unnoticed.

Props MatheusGimenez, johnbillion

Fixes #39117

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/admin-filters.php

    r41163 r41164  
    5555add_action( 'update_option_siteurl',       'update_home_siteurl', 10, 2 );
    5656add_action( 'update_option_page_on_front', 'update_home_siteurl', 10, 2 );
     57add_action( 'update_option_admin_email',   'wp_site_admin_email_change_notification', 10, 3 );
    5758
    5859add_filter( 'heartbeat_received', 'wp_check_locked_posts',  10,  3 );
Note: See TracChangeset for help on using the changeset viewer.