[wp-trac] [WordPress Trac] #15267: 'password_reset_message' filter arguments
WordPress Trac
wp-trac at lists.automattic.com
Sun Oct 31 16:25:11 UTC 2010
#15267: 'password_reset_message' filter arguments
--------------------------+-------------------------------------------------
Reporter: arena | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Mail | Version: 3.1
Severity: critical | Keywords:
--------------------------+-------------------------------------------------
as in filter
'retrieve_password_message' arguments allows to bypass the wp_mail
function ($message, $key)
in filter 'password_reset_message' it is not the case.
in pluggable.php
the line
{{{
$message = apply_filters('password_reset_message', $message, $new_pass);
}}}
has to be
{{{
$message = apply_filters('password_reset_message', $message, $new_pass,
$key);
}}}
thank you
--
Ticket URL: <http://core.trac.wordpress.org/ticket/15267>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list