vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-10-04 22:57:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Pluggable random password generator from pishmishy. fixes #5401

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@6385 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2007-12-15 05:31:16 +00:00
parent 95e4e8c822
commit 5918e8cf1c
5 changed files with 23 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wp-login.php
+5 -5
View File
@@ -110,9 +110,9 @@ case 'retrievepassword' :
do_action('retreive_password', $user_login); // Misspelled and deprecated
do_action('retrieve_password', $user_login);
// Generate something random for a password... md5'ing current time with a rand salt
// Generate something random for a key...
$key = substr( md5( uniqid( microtime() ) ), 0, 8);
// Now insert the new pass md5'd into the db
// Now insert the new md5 key into the db
$wpdb->query("UPDATE $wpdb->users SET user_activation_key = '$key' WHERE user_login = '$user_login'");
$message = __('Someone has asked to reset the password for the following site and username.') . "\r\n\r\n";
$message .= get_option('siteurl') . "\r\n\r\n";
@@ -182,8 +182,8 @@ case 'rp' :
do_action('password_reset');
// Generate something random for a password... md5'ing current time with a rand salt
$new_pass = substr( md5( uniqid( microtime() ) ), 0, 7);
// Generate something random for a password...
$new_pass = wp_generate_password();
$new_hash = wp_hash_password($new_pass);
$wpdb->query("UPDATE $wpdb->users SET user_pass = '$new_hash', user_activation_key = '' WHERE ID = '$user->ID'");
wp_cache_delete($user->ID, 'users');
@@ -241,7 +241,7 @@ case 'register' :
$errors = apply_filters( 'registration_errors', $errors );
if ( empty( $errors ) ) {
$user_pass = substr( md5( uniqid( microtime() ) ), 0, 7);
$user_pass = wp_generate_password();
$user_id = wp_create_user( $user_login, $user_pass, $user_email );
if ( !$user_id )