WordPress.org

Make WordPress Core

Changeset 44602


Ignore:
Timestamp:
01/15/2019 06:26:23 AM (15 months ago)
Author:
pento
Message:

Users: Check that a valid user is passed to get_password_reset_key().

Props edocev.
Fixes #44601.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/user.php

    r44597 r44602  
    22182218    global $wpdb, $wp_hasher;
    22192219
     2220    if ( ! ( $user instanceof WP_User ) ) {
     2221        return new WP_Error( 'invalidcombo', __( '<strong>ERROR</strong>: There is no account with that username or email address.' ) );
     2222    }
     2223
    22202224    /**
    22212225     * Fires before a new password is retrieved.
Note: See TracChangeset for help on using the changeset viewer.