updated plugin Easy Digital Downloads
version 3.1.2
This commit is contained in:
@ -161,7 +161,7 @@ add_filter( 'login_url', 'edd_update_login_url', 10, 3 );
|
||||
function edd_update_login_url( $url, $redirect_to, $force_reauth ) {
|
||||
|
||||
// Don't change the login URL if the request is an admin request.
|
||||
if ( is_admin() ) {
|
||||
if ( ! edd_doing_ajax() && is_admin() ) {
|
||||
return $url;
|
||||
}
|
||||
|
||||
|
@ -117,6 +117,13 @@ add_action( 'edd_user_lost_password', 'edd_handle_lost_password_request' );
|
||||
* @return void
|
||||
*/
|
||||
function edd_handle_lost_password_request( $data ) {
|
||||
|
||||
// Verify the nonce.
|
||||
if ( empty( $data['edd_lost-password_nonce'] ) || ! wp_verify_nonce( $data['edd_lost-password_nonce'], 'edd-lost-password-nonce' ) ) {
|
||||
edd_set_error( 'edd_lost_password', __( 'Your request could not be completed.', 'easy-digital-downloads' ) );
|
||||
return;
|
||||
}
|
||||
|
||||
if ( 'POST' === $_SERVER['REQUEST_METHOD'] ) {
|
||||
$errors = retrieve_password();
|
||||
if ( ! is_wp_error( $errors ) ) {
|
||||
@ -127,8 +134,12 @@ function edd_handle_lost_password_request( $data ) {
|
||||
if ( $message ) {
|
||||
// WP_Error messages include "Error:" so we remove that here to prevent duplication.
|
||||
$message = explode( ':', $message );
|
||||
$message = ! empty( $message[1] ) ? trim( $message[1] ) : trim( $message[0] );
|
||||
edd_set_error( $id, $message );
|
||||
$output = trim( $message[0] );
|
||||
if ( ! empty( $message[1] ) ) {
|
||||
unset( $message[0] );
|
||||
$output = trim( implode( ':', $message ) );
|
||||
}
|
||||
edd_set_error( $error_code, $output );
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -253,6 +264,11 @@ function edd_validate_password_reset( $data ) {
|
||||
wp_die( __( 'Invalid password reset request.', 'easy-digital-downloads' ), __( 'Error', 'easy-digital-downloads' ), array( 'response' => 400 ) );
|
||||
}
|
||||
|
||||
// Verify the nonce.
|
||||
if ( ! isset( $data['edd_resetpassword_nonce'] ) || ! wp_verify_nonce( $data['edd_resetpassword_nonce'], 'edd-reset-password-nonce' ) ) {
|
||||
edd_set_error( 'password_reset_failed', __( 'Invalid password reset request.', 'easy-digital-downloads' ) );
|
||||
}
|
||||
|
||||
if ( empty( $data['rp_key'] ) ) {
|
||||
edd_set_error( 'password_reset_failed', __( 'Invalid password reset request.', 'easy-digital-downloads' ) );
|
||||
}
|
||||
|
Reference in New Issue
Block a user