Changeset 47651 for branches/4.6/src/wp-includes/user.php

Timestamp:

04/29/2020 04:24:40 PM (6 years ago)

Author:

whyisjake

Message:

User: Invalidate user_activation_key on password update.
Query: Ensure that only a single post can be returned on date/time based queries.
Cache API: Ensure proper escaping around the stats method in the cache API.
Formatting: Expand sanitize_file_name to have better support for utf8 characters.

Brings the changes in [47634], [47635], [47637], and [47638] to the 4.6 branch.

Props: batmoo, ehti, nickdaugherty, peterwilsoncc, sergeybiryukov, sstoqnov, westi, whyisjake, whyisjake, xknown.

Location:

branches/4.6

Files:

• . (modified) (1 prop)
• src/wp-includes/user.php (modified) (1 diff)

branches/4.6/src/wp-includes/user.php

@@ -1613 +1613 @@
 
         if ( $update ) {
-                if ( $user_email !== $old_user_data->user_email ) {
+                if ( $user_email !== $old_user_data->user_email || $user_pass !== $old_user_data->user_pass ) {
                         $data['user_activation_key'] = '';
                 }