Users: Check that a valid user is passed to `get_password_reset_key()`.
Props edocev. Fixes #44601. git-svn-id: https://develop.svn.wordpress.org/trunk@44602 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
de1b02f61b
commit
0393473016
|
@ -2217,6 +2217,10 @@ function wp_get_password_hint() {
|
||||||
function get_password_reset_key( $user ) {
|
function get_password_reset_key( $user ) {
|
||||||
global $wpdb, $wp_hasher;
|
global $wpdb, $wp_hasher;
|
||||||
|
|
||||||
|
if ( ! ( $user instanceof WP_User ) ) {
|
||||||
|
return new WP_Error( 'invalidcombo', __( '<strong>ERROR</strong>: There is no account with that username or email address.' ) );
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Fires before a new password is retrieved.
|
* Fires before a new password is retrieved.
|
||||||
*
|
*
|
||||||
|
|
Loading…
Reference in New Issue