Changeset 47634 for trunk/src/wp-includes/user.php

Timestamp:

04/29/2020 03:23:37 PM (4 years ago)

Author:

whyisjake

Message:

User: Invalidate user_activation_key on password update.

Props: sstoqnov, sergeybiryukov.

File:

• trunk/src/wp-includes/user.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -1813 +1813 @@
 
     if ( $update ) {
-        if ( $user_email !== $old_user_data->user_email ) {
+        if ( $user_email !== $old_user_data->user_email || $user_pass !== $old_user_data->user_pass ) {
             $data['user_activation_key'] = '';
         }