Changeset 10941 for trunk/src/bp-core/bp-core-update.php

Timestamp:

07/10/2016 09:46:27 PM (8 years ago)

Author:

djpaul

Message:

Emails: add unsubscribe feature.

Updates the unsubscribe token to link to a new unsubscribe action handler.

All emails from other platforms or popular websites have a unsubscribe link. For previous versions of BuddyPress, our unsubscribe link pointed to that user's notifications page. However, if someone creates an account on a BuddyPress with a fraudulent email address (for example), that email address' owner will not know the account's authentication details, and so have no way to unsubscribe from that "spam" email.

The change implements a new action handler which accepts unsubscription requests from un-authenticated requests. It adds an new option containing a dynamically generated salt which is used to generate the hash on the unsubscribe link.

Fixes #6932

Props tharsheblows, DJPaul

File:

• trunk/src/bp-core/bp-core-update.php (modified) (2 diffs)

trunk/src/bp-core/bp-core-update.php

@@ -264 +264 @@
             bp_update_to_2_5();
         }
+
+        // Version 2.7.0.
+        if ( $raw_db_version < 10940 ) {
+            bp_update_to_2_7();
+        }
     }
 
@@ -498 +503 @@
 function bp_update_to_2_5() {
     bp_core_install_emails();
+}
+
+/**
+ * 2.7.0 update routine.
+ *
+ * - Add email unsubscribe salt.
+ *
+ * @since 2.7.0
+ */
+function bp_update_to_2_7() {
+    bp_add_option( 'bp-emails-unsubscribe-salt', base64_encode( wp_generate_password( 64, true, true ) ) );
 }