[wp-trac] [WordPress Trac] #24617: Spammed users should not be able to reset their password

[WordPress Trac]

#24617: Spammed users should not be able to reset their password
-------------------------------------------------+-------------------------
 Reporter:  r-a-y                                |       Owner:
     Type:  defect (bug)                         |  websupporter
 Priority:  normal                               |      Status:  assigned
Component:  Users                                |   Milestone:  4.6
 Severity:  normal                               |     Version:  3.0
 Keywords:  good-first-bug has-patch has-unit-   |  Resolution:
  tests                                          |     Focuses:  multisite
-------------------------------------------------+-------------------------

Comment (by jeremyfelt):

 Replying to [comment:11 websupporter]:
 > if we just put `$allow` to false, we retun `Password reset is not
 allowed for this user` as the standard not allowed.

 Ahh, +1 for this then. I think keeping it generic and using the same
 messaging as other possible reasons makes sense.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/24617#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform