WordPress.org

Make WordPress Core


Ignore:
Timestamp:
07/27/17 02:23:26 (6 months ago)
Author:
johnbillion
Message:

Options, Meta APIs: Send a notification to the old admin email address when the site admin email or network admin email address is changed.

This reduces the chances of a site compromise going unnoticed, in the same way that the same notifications for user account email address changes reduces the chances of a user account compromise going unnoticed.

Props MatheusGimenez, johnbillion

Fixes #39117

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/admin-filters.php

    r41163 r41164  
    5555add_action( 'update_option_siteurl',       'update_home_siteurl', 10, 2 ); 
    5656add_action( 'update_option_page_on_front', 'update_home_siteurl', 10, 2 ); 
     57add_action( 'update_option_admin_email',   'wp_site_admin_email_change_notification', 10, 3 ); 
    5758 
    5859add_filter( 'heartbeat_received', 'wp_check_locked_posts',  10,  3 ); 
Note: See TracChangeset for help on using the changeset viewer.