[wp-trac] [WordPress Trac] #33209: Inviting a new user to Multisite results in password being emailed

[WordPress Trac]

#33209: Inviting a new user to Multisite results in password being emailed
------------------------------------+-----------------------------
 Reporter:  Ipstenu                 |       Owner:
     Type:  enhancement             |      Status:  new
 Priority:  normal                  |   Milestone:  Future Release
Component:  Users                   |     Version:
 Severity:  normal                  |  Resolution:
 Keywords:  has-patch dev-feedback  |     Focuses:  multisite
------------------------------------+-----------------------------

Comment (by thomaswm):

 [attachment:33209.2.diff] is an attempt to fix both this ticket and #33186
 in a backwards-compatible way. It does the following things:

 * Changes the default text for notification emails so that they contain a
 placeholder `RESETPWLINK` instead of `PASSWORD`.
 * Performs a simple `false !== strpos( $welcome_email, 'PASSWORD' )` check
 in `wp_welcome_notification`/`wp_welcome_notification`  to see if the
 email text in the `welcome_email`/`welcome_user_email` option contains the
 placeholder for the password.
  * If it does, then the password is sent to the user in plain text (in
 order to maintain backwards compatibility).
  * Otherwise, a password reset link is sent instead.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33209#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform