[wp-trac] [WordPress Trac] #47718: Verification of new admin email address can be bypassed via options.php

WordPress Trac noreply at wordpress.org
Sun Aug 4 09:39:09 UTC 2019


#47718: Verification of new admin email address can be bypassed via options.php
--------------------------------+---------------------
 Reporter:  pixolin             |       Owner:  (none)
     Type:  defect (bug)        |      Status:  new
 Priority:  normal              |   Milestone:  5.3
Component:  Options, Meta APIs  |     Version:
 Severity:  normal              |  Resolution:
 Keywords:  has-screenshots     |     Focuses:
--------------------------------+---------------------
Changes (by donmhico):

 * keywords:  needs-patch has-screenshots => has-screenshots


Comment:

 My patch is pretty much based from the code provided by @zodiac1978 above.
 I only applied the following changes.

 1. I placed the `add_action()` inside `wp-admin/includes/admin-
 filters.php` and placed the callback function inside `wp-
 admin/includes/options.php`. I think these are the most suitable places
 for them. Please advice otherwise.

 2. I also change the function name from `options_page_warning()` to
 `wp_admin_options_php_page_warning_admin_notice()` to make it more
 specific and less likely to have function name duplicate conflict.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47718#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list