Reset password validation. (#1351)

Author: y000yal

includes/admin/settings/emails/class-ur-settings-reset-password-email.php

@@ -51,6 +51,25 @@ public function __construct() {
 			$this->title       = __( 'Reset Password', 'user-registration' );
 			$this->description = __( 'Sends a secure password reset link to the user who requested a reset.', 'user-registration' );
 			$this->receiver    = 'User';
+
+			add_filter( 'user_registration_admin_settings_sanitize_option_user_registration_reset_password_email', array( $this, 'validate_reset_link_smart_tag' ), 10, 2 );
+		}
+
+		public function validate_reset_link_smart_tag( $value, $option ) {
+			$required_url = '{{home_url}}/{{ur_reset_pass_slug}}?action=rp&key={{key}}&login={{username}}';
+			$content      = html_entity_decode( (string) $value, ENT_QUOTES );
+
+			if ( false === strpos( $content, $required_url ) ) {
+				UR_Admin_Settings::add_error(
+					sprintf(
+						/* translators: %s: required reset password link. */
+						__( 'Reset Password email not saved: the reset link <code>%s</code> is required and cannot be removed or modified.', 'user-registration' ),
+						esc_html( $required_url )
+					)
+				);
+				return UR_Admin_Settings::get_option( $option['id'], $option['default'] );
+			}
+			return $value;
 		}
 
 		/**

includes/class-ur-smart-tags.php

@@ -67,6 +67,7 @@ public static function ur_unauthenticated_parsable_smart_tags_list() {
 		$smart_tags = array(
 			'{{blog_info}}'        => esc_html__( 'Blog Info', 'user-registration' ),
 			'{{home_url}}'         => esc_html__( 'Home URL', 'user-registration' ),
+			'{{ur_reset_pass_slug}}' => esc_html__( 'Reset Password Slug', 'user-registration' ),
 			'{{admin_email}}'      => esc_html__( 'Site Admin Email', 'user-registration' ),
 			'{{site_name}}'        => esc_html__( 'Site Name', 'user-registration' ),
 			'{{site_url}}'         => esc_html__( 'Site URL', 'user-registration' ),