Changeset 13932

Timestamp:

07/29/2024 02:56:28 AM (7 weeks ago)

Author:

dd32

Message:

SSO: When a user resets their password, treat that as a password change for logging purposes.

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (2 diffs)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -81 +81 @@
                 add_action( 'wp_login', array( $this, 'record_last_logged_in' ), 10, 2 );
                 add_action( 'profile_update', array( $this, 'record_last_password_change' ), 10, 3 );
+                add_action( 'wp_set_password', array( $this, 'record_last_password_change_reset' ), 10, 3 );
 
                 add_action( 'login_form_logout', array( $this, 'login_form_logout' ) );
@@ -871 +872 @@
         }
 
+        /**
+         * Record the last date a user changed their password via password reset.
+         */
+        public function record_last_password_change_reset( $password, $user_id, $old_user_data ) {
+            $user = get_user_by( 'id', $user_id );
+            if ( $old_user_data->user_pass !== $user->user_pass ) {
+                update_user_meta( $user_id, 'last_password_change', gmdate( 'Y-m-d H:i:s' ) );
+            }
+        }
+
     }