updated plugin Easy Digital Downloads version 3.1.2

This commit is contained in:
2023-06-28 12:45:44 +00:00
committed by Gitium
parent 44df590080
commit f710fa7de2
120 changed files with 5556 additions and 3347 deletions

View File

@ -117,6 +117,13 @@ add_action( 'edd_user_lost_password', 'edd_handle_lost_password_request' );
* @return void
*/
function edd_handle_lost_password_request( $data ) {
// Verify the nonce.
if ( empty( $data['edd_lost-password_nonce'] ) || ! wp_verify_nonce( $data['edd_lost-password_nonce'], 'edd-lost-password-nonce' ) ) {
edd_set_error( 'edd_lost_password', __( 'Your request could not be completed.', 'easy-digital-downloads' ) );
return;
}
if ( 'POST' === $_SERVER['REQUEST_METHOD'] ) {
$errors = retrieve_password();
if ( ! is_wp_error( $errors ) ) {
@ -127,8 +134,12 @@ function edd_handle_lost_password_request( $data ) {
if ( $message ) {
// WP_Error messages include "Error:" so we remove that here to prevent duplication.
$message = explode( ':', $message );
$message = ! empty( $message[1] ) ? trim( $message[1] ) : trim( $message[0] );
edd_set_error( $id, $message );
$output = trim( $message[0] );
if ( ! empty( $message[1] ) ) {
unset( $message[0] );
$output = trim( implode( ':', $message ) );
}
edd_set_error( $error_code, $output );
}
}
}
@ -253,6 +264,11 @@ function edd_validate_password_reset( $data ) {
wp_die( __( 'Invalid password reset request.', 'easy-digital-downloads' ), __( 'Error', 'easy-digital-downloads' ), array( 'response' => 400 ) );
}
// Verify the nonce.
if ( ! isset( $data['edd_resetpassword_nonce'] ) || ! wp_verify_nonce( $data['edd_resetpassword_nonce'], 'edd-reset-password-nonce' ) ) {
edd_set_error( 'password_reset_failed', __( 'Invalid password reset request.', 'easy-digital-downloads' ) );
}
if ( empty( $data['rp_key'] ) ) {
edd_set_error( 'password_reset_failed', __( 'Invalid password reset request.', 'easy-digital-downloads' ) );
}