Changeset 57711 for trunk/src/wp-includes/user.php

Timestamp:

02/26/2024 10:41:50 AM (17 months ago)

Author:

swissspidy

Message:

Login and Registration: Slash email address when updating an existing user.

Addresses an issue with password reset keys when the email address contains special characters such as apostrophes.

Props emirpprime, rajinsharwar, fnpen, hellofromTonya, oglekler, nicolefurlan.
Fixes #52529.

File:

• trunk/src/wp-includes/user.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -2097 +2097 @@
         }
 
+        // Slash current user email to compare it later with slashed new user email.
+        $old_user_data->user_email = wp_slash( $old_user_data->user_email );
+
         // Hashed in wp_update_user(), plaintext if called directly.
         $user_pass = ! empty( $userdata['user_pass'] ) ? $userdata['user_pass'] : $old_user_data->user_pass;