Changeset 58333

Timestamp:

06/04/2024 02:42:29 PM (2 months ago)

Author:

audrasjb

Message:

Login and Registration: Flush user_activation_key after successfully login.

This changeset ensures the user_activation_key is flushed after successful login, so reset password links can not be used anymore after the user successfully log into their dashboard.

Props nsinelnikov, rajinsharwar, Rahmohn, oglekler, hellofromTonya.
Fixes #58901.
See #32429

Location:

trunk

Files:

• src/wp-includes/user.php (modified) (1 diff)
• tests/phpunit/tests/auth.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -111 +111 @@
 
     wp_set_auth_cookie( $user->ID, $credentials['remember'], $secure_cookie );
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
     /**
      * Fires after the user has successfully logged in.

trunk/tests/phpunit/tests/auth.php

@@ -425 +425 @@
 
     /**
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
      * Ensure users can log in using both their username and their email address.
      *