Invalidate password keys when a user's email changes.

git-svn-id: https://develop.svn.wordpress.org/trunk@30430 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin
2014-11-20 13:39:03 +00:00
parent 7e830d4a4a
commit d2b4df2d4f
2 changed files with 35 additions and 0 deletions

View File

@@ -1885,6 +1885,9 @@ function wp_insert_user( $userdata ) {
$data = wp_unslash( $compacted );
if ( $update ) {
if ( $user_email !== $old_user_data->user_email ) {
$data['user_activation_key'] = '';
}
$wpdb->update( $wpdb->users, $data, compact( 'ID' ) );
$user_id = (int) $ID;
} else {