Changeset 10801 for branches/2.5/src/bp-settings/bp-settings-actions.php

Timestamp:

05/24/2016 02:45:08 PM (10 years ago)

Author:

boonebgorges

Message:

Better hash building for activation keys, password reset keys, and filenames.

There is no need to use user-facing info for these hashes.

Ports [10800] to the 2.5 branch.

Props DJPaul, vortfu.

Location:

branches/2.5

Files:

• . (modified) (1 prop)
• src/bp-settings/bp-settings-actions.php (modified) (1 diff)

branches/2.5/src/bp-settings/bp-settings-actions.php

@@ -95 +95 @@
                                 // Store a hash to enable email validation.
                                 if ( false === $email_error ) {
-                                        $hash = wp_hash( $_POST['email'] );
+                                        $hash = wp_generate_password( 32, false );
 
                                         $pending_email = array(