bcfdbb954d
Refactor email placeholders and deprecate obsolete methods
...
Streamline placeholder handling for emails by introducing universal patterns and replacements, and update email dispatch functions for efficiency. Deprecated various redundant user and password-related methods, consolidating logic into common utility classes for better maintainability.
2025-05-19 14:26:39 +03:00
9804b92583
Refactor form request checks to simplify and optimize logic
...
Simplified conditional checks for password and account form submissions by replacing `isset` with `!empty` where applicable. This improves readability and reduces redundancy while maintaining functionality and security. Added comments to clarify nonce verification status.
2025-05-12 15:39:52 +03:00
0aae50db53
- fix password reset page check
2025-05-01 13:14:46 +03:00
db0da58351
Refactor password reset URL handling and email dispatch.
...
Added optional parameter to `reset_url` for user-specific handling. Updated email dispatch logic to include dynamic generation of the password reset link with proper placeholder replacements.
2025-04-23 14:35:38 +03:00
54deffd244
Enhance password reset logic and add Action Scheduler filter
...
Ensure proper handling of user data in password reset functions by adding checks and updating parameter handling. Introduce a new filter to extend site health information and include a setting for enabling email sending via Action Scheduler. Improve code clarity with updated comments and function annotations.
2025-04-22 17:16:55 +03:00
422d2b7c67
Refactor password handling to bypass wp_unslash.
...
Introduce a dedicated method to handle password fields securely, avoiding `wp_unslash` for these fields. This enhances consistency and security when processing form data across the plugin.
2025-02-12 17:47:19 +02:00
17d95a189b
Task CU-86cxwy7ww
...
- password sanitize has been changed to the standard WordPress one.
2025-02-04 23:23:26 +02:00
a0892e18aa
* enhancements related to #1599 ;
2024-12-19 17:24:52 +02:00
3029b2581d
- fix space in username after reset password with SMTP
2024-04-01 16:37:33 +03:00
a17d66093a
Merge pull request #1464 from ultimatemember/fix/reset_url_hash
...
Fixed reset url hash
2024-02-29 15:02:23 +02:00
354323af2e
- stop password validation if empty
2024-02-28 20:18:51 +02:00
042dc6e320
- fixed password reset url for the approved user who didn't set their password after registration without password; reset URL hash has been generated twice and we have wrong hash in reset password email.
2024-02-22 22:01:07 +02:00
f026f44323
- reviewed #1428 ;
2024-01-18 11:30:49 +02:00
205a3ea9bc
- reviewed #1428 ;
2024-01-17 16:06:58 +02:00
d9021373ce
- add meta to user
2024-01-16 14:00:22 +02:00
26de093b38
- fixed variable type for UM()->form()->processing and UM()->fields()->set_id;
2023-08-23 15:00:21 +03:00
bfef1f9dc7
- reviewed #1269 ;
...
- unified `UM()->fields()->editing` and `UM()->fields()->viewing` to bool variables use true|false in conditions to make `===` or `!==` comparing;
2023-08-15 03:49:13 +03:00
ce4cf8fe7b
- updated hookdocs;
...
- reviewed `um_safe_redirect()`;
- updated readme.txt
2023-07-18 12:06:17 +03:00
5b647ae5e9
- add translators
2023-07-13 11:36:29 +03:00
8ac7016a1d
- added additional hook attributes to 'um_reset_password_errors_hook' and 'um_reset_password_process_hook';
2023-07-04 16:47:32 +03:00
fcd5854424
Merge branch 'development/2.6.5' into fix/remove_extract_frontend
2023-06-27 16:08:09 +03:00
f8da8f0433
- review ultimatemember_password();
...
- made UM()->password()->change_password variable as private and avoid dynamic for PHP8 compatibility;
- marked `um_before_{$mode}_form_is_loaded` hook as has to be deprecated since 2.7.0 because it duplicates previous 2 hooks with similar;
- updated hookdocs for `um_before_{$mode}_form_is_loaded`;
- updated hookdocs for `um_before_form_is_loaded`;
- updated hookdocs for `um_pre_{$mode}_shortcode`;
2023-06-26 16:54:43 +03:00
709625545e
- fix ultimatemember_password()
2023-06-22 12:50:44 +03:00
76d1e38e81
- fixed deprecated PHP notice for $change_password variable;
2023-06-22 12:05:23 +03:00
861930f108
- fixed input POST data on Change Password
2023-03-01 15:33:11 +02:00
d18943771d
Fix honeypot triggering in password reset, when not set
2023-01-10 13:11:18 +01:00
0f8b87f288
- closed #1100 ;
2022-12-13 15:25:32 +02:00
19c83933f2
- closed #1101 ;
2022-12-13 14:53:35 +02:00
b98f2a6edf
- fixed issue with visible ID. Changed it to the user_login. It's WordPress native logic for reset password links and form;
2022-08-11 21:49:19 +03:00
fa9b85773e
- fixed using special chars inside the password;
2022-06-10 01:53:35 +03:00
601c75ad92
- fixed #946 ;
...
- fixed PHP notices;
2021-12-15 02:46:47 +02:00
74bfdbcb18
- closed #927 ;
...
- updated readme;
2021-12-14 18:31:47 +02:00
9c9ac59be7
- changed version to 2.3.0;
...
- added update for Required strong password option;
2021-12-14 17:44:07 +02:00
fc92903f97
- fixed updating display_name if there is set the User Display Name setting to Default WP Display Name in UM > General > Users > Display name;
...
- fixed typo in the password validation
2021-09-21 18:26:57 +03:00
e8c1497ec4
- fixed password length validation;
...
- added settings for the password min/max length;
2021-09-21 13:25:49 +03:00
07e664be80
- intermediate results with sanitizing form handlers;
2021-06-29 02:51:54 +03:00
a8de403837
- minified scripts;
...
- fixed PHP notice with slider's range;
- fixed the issue with the password reset hash;
2021-03-08 16:59:11 +02:00
6e0a711f4b
- code review;
2021-03-03 17:55:12 +02:00
fc668b2744
Send an email when the password is changed
2021-02-24 15:51:52 +02:00
5afebdd786
- Added: Ability for the integration with Gutenberg Block restriction settings (extends the block restriction settings via 3rd-party plugins);
...
- Added: Invalid nonce validation on Login and Registration pages instead of wp_die()
2020-12-04 03:54:59 +02:00
fa13e82202
- There are changed PHP’s intval(), strval(), floatval(), and boolval() typecasting functions to (int), (string), (float) and (bool) regarding [this doc]( https://make.wordpress.org/core/2020/11/20/miscellaneous-developer-focused-changes-in-wordpress-5-6/ ).
2020-11-24 12:55:22 +02:00
5e782cf922
- fixed account submission for password reset;
2020-08-03 18:06:26 +03:00
72a1e9a7c3
- small code formatting;
2020-03-02 16:47:56 +02:00
86c0190a87
- fixed #614 error;
2019-12-05 17:11:28 +02:00
7812103851
separate placeholders into filters
2019-05-06 17:22:57 +03:00
efa38f7b12
- reset password nocache headers;
2019-04-01 17:24:45 +03:00
ccdd62ccdf
- fixed security issue with reset password;
2019-03-26 12:55:57 +02:00
127086942a
- fixed member directory edit profile button;
...
- small fixes for password reset;
2019-03-22 14:12:44 +02:00
407d212745
Fix: "um_after_changing_user_password" running before password has changed
...
Link: https://github.com/ultimatemember/ultimatemember/issues/532
2019-03-06 19:44:33 +02:00
00ea16d24f
Fix password reset cookie
2019-01-17 12:18:19 +08:00
Mykyta Synelnikov