WordPress.org

Make WordPress Core


Ignore:
Timestamp:
04/29/2020 03:23:37 PM (6 months ago)
Author:
whyisjake
Message:

User: Invalidate user_activation_key on password update.

Props: sstoqnov, sergeybiryukov.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/user.php

    r47611 r47634  
    18131813
    18141814    if ( $update ) {
    1815         if ( $user_email !== $old_user_data->user_email ) {
     1815        if ( $user_email !== $old_user_data->user_email || $user_pass !== $old_user_data->user_pass ) {
    18161816            $data['user_activation_key'] = '';
    18171817        }
Note: See TracChangeset for help on using the changeset viewer.