[buddypress-trac] [BuddyPress] #1078: Incorrect activation link in activate e-mail

buddypress-trac at lists.automattic.com buddypress-trac at lists.automattic.com
Thu Sep 24 14:24:30 UTC 2009

#1078: Incorrect activation link in activate e-mail
Reporter:  jdaviescoates  |       Owner:     
    Type:  defect         |      Status:  new
Priority:  critical       |   Milestone:  1.1
Keywords:                 |  

Comment(by jdaviescoates):

 I've just had a look in bp-core-activation.php and notice it says:

  * bp_core_disable_welcome_email()
  * Since the user now chooses their password, sending it over clear-text
 to an
  * email address is no longer necessary. It's also a terrible idea
 security wise.
 function bp_core_disable_welcome_email() {
         return false;
 add_filter( 'wpmu_welcome_user_notification',
 'bp_core_disable_welcome_email' );



 Hmz, maybe this is half done in 1.1rc and is part of the problem I've
 reported above? If one manaully changed the activation link to include wp-
 and .php then it works, but it sets new password (not the one chosen at
 registration) and e-mails it out.

 /me is confused.

Ticket URL: <http://trac.buddypress.org/ticket/1078#comment:2>
BuddyPress <http://buddypress.org/>

More information about the buddypress-trac mailing list