[wp-trac] [WordPress Trac] #24617: Spammed users should not be able to reset their password

WordPress Trac noreply at wordpress.org
Fri Jun 21 19:48:47 UTC 2013


#24617: Spammed users should not be able to reset their password
--------------------------+-----------------------------
 Reporter:  r-a-y         |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Users         |    Version:  2.3.3
 Severity:  normal        |   Keywords:  has-patch
--------------------------+-----------------------------
 In multisite, if an admin has marked a user as spam, the spammed user can
 still attempt to reset their password.

 Even though spammed users cannot login, we shouldn't be able to let
 spammers to reset their password.

 Attached patch addresses this.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24617>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list