MantisBT: master-2.27 cd84c617

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-2.27 2025-08-10 12:59 master-2.27 bed58477
Affected Issues  0036005: CVE-2025-55155: Lack of verification when changing a user's email address
Changeset

New function user_ensure_email_valid()

Previously, user_set_email() was both validating and storing the new
email.

This allows performing the validation independently. user_set_email()
calls the new function so current behavior remains unchanged.

Issue 0036005
mod - core/user_api.php Diff File