Changeset 43084 for branches/4.9/src/wp-admin/includes/ajax-actions.php

Timestamp:

05/02/2018 01:03:53 AM (7 years ago)

Author:

SergeyBiryukov

Message:

Privacy: update and enhance the method to confirm user requests by email. Introduce WP_User_Request to hold all request vars similarly to WP_Post.

Props mikejolley, desrosj.
Merges [43011] and [43014] to the 4.9 branch.
See #43443.

Location:

branches/4.9

Files:

• . (modified) (1 prop)
• src/wp-admin/includes/ajax-actions.php (modified) (1 diff)

branches/4.9/src/wp-admin/includes/ajax-actions.php

@@ -4155 +4155 @@
 
     // Find the request CPT
-    $request = get_post( $request_id );
-    if ( 'remove_personal_data' !== $request->post_title ) {
+    $request = wp_get_user_request_data( $request_id );
+
+    if ( ! $request || 'remove_personal_data' !== $request->action_name ) {
         wp_send_json_error( __( 'Error: Invalid request ID.' ) );
     }
 
-    $email_address = get_post_meta( $request_id, '_wp_user_request_user_email', true );
+    $email_address = $request->email;
 
     if ( ! is_email( $email_address ) ) {