Changeset 5552

Timestamp:

10/16/2014 07:31:04 AM (11 years ago)

Author:

nacin

Message:

bbPress 1.x: Clear user activation keys after password changes.

The code previously cleared activation keys after they were used to reset a password, but not if a user logs in to change the password on their own (say, if they remember it). Also, actually remove the DB row, rather than emptying it.

File:

• branches/1.1/bb-includes/functions.bb-users.php (modified) (2 diffs)

branches/1.1/bb-includes/functions.bb-users.php

@@ -359 +359 @@
     }
 
-    bb_update_usermeta( $user->ID, 'newpwdkey', '' );
     return true;
 }
@@ -381 +380 @@
 
     $wp_users_object->set_password( $password, $user_id );
+    bb_delete_usermeta( $user_id, 'newpwdkey' );
 
     do_action('bb_update_user_password', $user_id);