WordPress.org

Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#35766 closed defect (bug) (fixed)

Wrong email confirmation link sent in case the mail was changed in user admin

Reported by: ocean90 Owned by: ocean90
Milestone: 4.5 Priority: normal
Severity: normal Version:
Component: Users Keywords: has-patch
Focuses: multisite Cc:

Description

If a user isn't a member of a site in a multisite install they can change their profile settings at wp-admin/user/profile.php.
If the email is changed send_confirmation_on_profile_email() will send a mail with a confirmation link. But the function is using admin_url() for the link which ignores the wp-admin/user/ part.

Attachments (1)

35766.patch (803 bytes) - added by ocean90 6 years ago.

Download all attachments as: .zip

Change History (4)

@ocean90
6 years ago

This ticket was mentioned in Slack in #meta by ocean90. View the logs.


6 years ago

#3 @ocean90
6 years ago

  • Owner set to ocean90
  • Resolution set to fixed
  • Status changed from new to closed

In 36503:

Users: Use self_admin_url() for the email change confirmation link.

Prevents sending users to wp-admin/profile.php if they only have access to wp-admin/user/profile.php.

Fixes #35766.

Note: See TracTickets for help on using tickets.