WordPress.org

Make WordPress Core


Ignore:
Timestamp:
04/29/2020 03:46:39 PM (15 months ago)
Author:
whyisjake
Message:

User: Invalidate user_activation_key on password update.

Brings the changes in [47634] to the 5.4 branch.

Props: sstoqnov, sergeybiryukov.

Location:
branches/5.4
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.4

  • branches/5.4/src/wp-includes/user.php

    r47412 r47640  
    18041804
    18051805    if ( $update ) {
    1806         if ( $user_email !== $old_user_data->user_email ) {
     1806        if ( $user_email !== $old_user_data->user_email || $user_pass !== $old_user_data->user_pass ) {
    18071807            $data['user_activation_key'] = '';
    18081808        }
Note: See TracChangeset for help on using the changeset viewer.