[wp-trac] [WordPress Trac] #24617: Spammed users should not be able to reset their password
WordPress Trac
noreply at wordpress.org
Fri Jun 21 19:48:47 UTC 2013
#24617: Spammed users should not be able to reset their password
--------------------------+-----------------------------
Reporter: r-a-y | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Users | Version: 2.3.3
Severity: normal | Keywords: has-patch
--------------------------+-----------------------------
In multisite, if an admin has marked a user as spam, the spammed user can
still attempt to reset their password.
Even though spammed users cannot login, we shouldn't be able to let
spammers to reset their password.
Attached patch addresses this.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/24617>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list