登录注册体系的源码级硬切换
This commit is contained in:
1 parent
73fcd4ed72
commit
af52f9e94d
72 files changed
+1666
-6576
No files matched your search
@@ -302,25 +302,13 @@ add_action('wp_ajax_aksrt_change_email', function () {
|
||||
}
|
||||
}
|
||||
|
||||
// ====== 邮箱变更后重置验证状态(阶段 5)======
|
||||
// 1. 写入 14 天回滚窗口 meta(管理员可在此期内还原旧邮箱)
|
||||
// 2. 把 aksrt_email_verified 重置为 0
|
||||
// 3. 若功能启用 → 立即给新邮箱发送验证邮件
|
||||
// Keep the account-change audit window; registration verification is pre-create only.
|
||||
update_user_meta( $user_id, 'aksrt_email_previous', $old_email );
|
||||
update_user_meta( $user_id, 'aksrt_email_changed_at', time() );
|
||||
|
||||
$verify_url = '';
|
||||
$verify_message = '';
|
||||
if ( class_exists( '\AKSRT\Settings\Settings' ) && class_exists( '\AKSRT\Auth\Service' )
|
||||
&& \AKSRT\Settings\Settings::registration_requires_email_verification() ) {
|
||||
update_user_meta( $user_id, 'aksrt_email_verified', 0 );
|
||||
// 用户对自身的 edit_user 权限映射到 'read',因此 admin_send_verification 会通过权限校验。
|
||||
$verify_result = \AKSRT\Auth\Service::admin_send_verification( $user_id, $user_id );
|
||||
if ( ! empty( $verify_result['success'] ) ) {
|
||||
$verify_url = function_exists('aksrt_get_verify_email_url') ? aksrt_get_verify_email_url( $user_id ) : '';
|
||||
$verify_message = __( '请前往新邮箱完成验证,否则下次登录将被拦截。', 'aksrt' );
|
||||
}
|
||||
}
|
||||
$verify_url = '';
|
||||
$verify_message = '';
|
||||
update_user_meta( $user_id, 'aksrt_email_verified', 1 );
|
||||
|
||||
if ( class_exists( 'WP_Session_Tokens' ) ) {
|
||||
WP_Session_Tokens::get_instance( $user_id )->destroy_all();
|
||||
|
||||
Reference in new issue
Block a user