[wp-trac] [WordPress Trac] #32430: Users should be notified of password/e-mail changes

WordPress Trac noreply at wordpress.org
Wed Jun 17 23:57:22 UTC 2015


#32430: Users should be notified of password/e-mail changes
----------------------------+--------------------------
 Reporter:  markjaquith     |       Owner:  markjaquith
     Type:  task (blessed)  |      Status:  reopened
 Priority:  normal          |   Milestone:  4.3
Component:  Security        |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  2nd-opinion     |     Focuses:
----------------------------+--------------------------
Changes (by johnbillion):

 * keywords:  has-patch needs-testing => 2nd-opinion
 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 I think some improvements can be made to the text in these emails.

  1. The "Notice of Password Change" and "Notice of Email Change" subject
 lines sound a bit clunky. A better phrase would be something like "Email
 Changed" or "Your email address has been changed".
  2. The phrase "If you did not change your password, please contact the
 Site Administrator at ###ADMIN_EMAIL###" does not make any sense if I am
 the only user on the site, or if I am the site administrator. How about
 some logic to only include this line when appropriate? ("Site
 Administrator" probably shouldn't be capitalised either.)
  3. The "Regards, All at ###SITENAME###" signature is indeed similar to
 the signature that's present in other emails that get sent out, but again
 it's not appropriate if I'm the only user on the site. Seeing as this is
 an automated security information email, and does not actually include the
 regards of anyone, I think this can be dropped. Maybe just leave the site
 URL in the signature.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32430#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list