[wp-trac] [WordPress Trac] #25853: Changeset 25696 breaks expected value of argument sent to filter 'retrieve_password_message'
WordPress Trac
noreply at wordpress.org
Thu Nov 21 10:43:19 UTC 2013
#25853: Changeset 25696 breaks expected value of argument sent to filter
'retrieve_password_message'
--------------------------+--------------------
Reporter: dcavins | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.7.2
Component: Users | Version: 3.7
Severity: minor | Resolution:
Keywords: |
--------------------------+--------------------
Comment (by shawnhooper):
I see a potential problem with this recommendation. Changing $key to
$hashed resolves the suggested use case of looking up user's information
from the database (which stores the hashed activation key).
However, any plugins that would use this filter to re-write the activation
message need to include the key in plain-text for inclusion in the
activation link. Since the key cannot be obtained from the stored hash,
it has to be passed to the filter from here.
Recommend adding the hash as another parameter:
{{{#!php
$message = apply_filters( 'retrieve_password_message', $message, $key,
$hashed );
}}}
so that anyone using this filter can make use of both the hashed and
unhashed keys as needed.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/25853#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list