Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

If using multisite, check user resetting password belongs to the current site 

Closes #6725
This commit is contained in:
Mike Jolley 2015-01-06 14:08:43 +00:00
parent ca3d3f7f33
commit d663a7a72e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
includes/shortcodes/class-wc-shortcode-my-account.php
View File

@ -244,6 +244,11 @@ class WC_Shortcode_My_Account {
return false;
}
if ( is_multisite() && ! is_user_member_of_blog( $user_data->id, get_current_blog_id() ) ) {
wc_add_notice( __( 'Invalid username or e-mail.', 'woocommerce' ), 'error' );
return false;
}
// redefining user_login ensures we return the right case in the email
$user_login = $user_data->user_login;
$user_email = $user_data->user_email;