Ok. Re: odd input name, can you add a code comment clarifying?


On Tue, May 28, 2013 at 12:31 PM, Joe Hoyle <notifications@github.com>wrote:

> In hm-accounts.functions.php:
>
> > @@ -84,7 +84,7 @@ function hma_lost_password( $email ) {
> >   */
> >  function hma_lost_password_email( $message, $key ) {
> >
> > -	$user = get_user_by_email(trim($_POST['user_login']));
> > +	$user = get_user_by_email( sanitize_email( $_POST['user_login'] ) );
>
> Yes, the forgot password takes an email address, it's name is user_login,
> though that is a past oversight which I would rather not change now as it
> would break backwards compat.
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/humanmade/hm-accounts/pull/1/files#r4420819>
> .
>