Make WordPress Core


Ignore:
Timestamp:
05/02/2018 01:00:46 AM (7 years ago)
Author:
SergeyBiryukov
Message:

Privacy: update the method to confirm user requests by email. Use a single CPT to store the requests and to allow logging/audit trail.

Props mikejolley.
Merges [43008] to the 4.9 branch.
See #43443.

Location:
branches/4.9
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.9

  • branches/4.9/src/wp-admin/includes/ajax-actions.php

    r43075 r43083  
    41564156    // Find the request CPT
    41574157    $request = get_post( $request_id );
    4158     if ( 'user_remove_request' !== $request->post_type ) {
     4158    if ( 'remove_personal_data' !== $request->post_title ) {
    41594159        wp_send_json_error( __( 'Error: Invalid request ID.' ) );
    41604160    }
    41614161
    4162     $email_address = get_post_meta( $request_id, '_user_email', true );
     4162    $email_address = get_post_meta( $request_id, '_wp_user_request_user_email', true );
    41634163
    41644164    if ( ! is_email( $email_address ) ) {
Note: See TracChangeset for help on using the changeset viewer.