Ubuntu
';
// Let's start the hellish stuff... =_=.
if ( secupress_wp_version_is( '4.3' ) ) {
$field = '
|
' . __( 'Type your current password', 'secupress' ) . '
|
';
} elseif ( secupress_wp_version_is( '4.1' ) ) {
$field = '
|
' . __( 'Type your current password', 'secupress' ) . '
|
';
} elseif ( secupress_wp_version_is( '3.8' ) ) {
$field = '
|
' . __( 'Type your current password', 'secupress' ) . '
|
';
} else {
$field = '
|
' . __( 'Type your current password', 'secupress' ) . '
|
';
}
if ( false !== strpos( $before, $sep ) ) {
$before = explode( $sep, $before, 2 );
$after = ( ! empty( $before[1] ) ? $sep : '' ) . $before[1];
$before = $before[0];
} elseif ( preg_match( '@^(.*)(\s*\s*)$@s', $before, $matches ) ) {
$before = $matches[1];
$after = $matches[2];
}
echo $before . $field . $after;
}
/**
* When a user submits a new password, check the old one is provided and correct.
* If not, trigger an error.
*
* @since 1.0
*
* @param (object) $errors WP_Error object, passed by reference.
* @param (bool) $update Whether this is a user update.
* @param (object) $user WP_User object, passed by reference.
*/
function secupress_oldpassword_check_old_password( $errors, $update, &$user ) {
if ( empty( $user->user_pass ) || ! isset( $user->ID ) ) {
return;
}
$old_pass = isset( $_POST['pass-old'] ) ? $_POST['pass-old'] : ''; // WPCS: CSRF ok.
$old_hash = get_userdata( $user->ID )->user_pass;
if ( ! $old_pass || ! wp_check_password( $old_pass, $old_hash, $user->ID ) ) {
$errors->add( 'pass', __( 'ERROR: Please enter your current password.', 'secupress' ), array( 'form-field' => 'pass-old' ) );
}
}