Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Don't reveal username when login failed on valid email login

This commit is contained in:
Gerhard 2015-06-26 14:15:31 +02:00
parent ec0783f382
commit 230301e6da
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
includes/class-wc-form-handler.php
View File

@ -794,7 +794,9 @@ class WC_Form_Handler {
$user = wp_signon( apply_filters( 'woocommerce_login_credentials', $creds ), $secure_cookie ); $user = wp_signon( apply_filters( 'woocommerce_login_credentials', $creds ), $secure_cookie );
if ( is_wp_error( $user ) ) { if ( is_wp_error( $user ) ) {
throw new Exception( $user->get_error_message() ); $message = $user->get_error_message();
$message = str_replace( '<strong>' . esc_html( $creds['user_login'] ) . '</strong>', '<strong>' . esc_html( $_POST['username'] ) . '</strong>', $message );
throw new Exception( $message );
} else { } else {
if ( ! empty( $_POST['redirect'] ) ) { if ( ! empty( $_POST['redirect'] ) ) {