Renoug Joni

<p>Disabling reset password  function over email of WordPress and Fix bug Unauthorized Reset Password (0day).<br />
Use caution and if necessary, after the core fix bug fixes you should delete it.</p>
<h4>Build Status</h4>
<h4>Development</h4>
<h4>Credits</h4>
<h4>Donations</h4>


Disable Reset Password

Disabling reset password function over email of Wordpress and Fix bug Unauthorized Reset Password (0day).

edward_plainview

<p>Prevent password resets or changes to specific users or user roles. User-specific exceptions to the sweeping user roles can be set. The user’s password is then protected from modification:</p>
<ul>
<li>In the user’s profile editor</li>
<li>Using the password reset link in the login window</li>
</ul>
<p>The settings are available to either the super admin on the network, or normal admins on a single installation. If you wish to hide the settings completely, put the following in your wp-config.php:</p>
<pre><code>define( 'PLAINVIEW_PROTECT_PASSWORDS_HIDE', true );
</code></pre>
<p>Requires PHP 5.4.</p>


Plainview Protect Passwords

I love that is works well with network sites so I don't have to replicate my settings across each of my sites. 

The only issue I ran into is that only network roles are added to the network settings. Maybe it's by design, but it would be awesome if it picked up the roles from the sites because that is where plugins like User Role Editor and WooCommerce have registered them. In order to protect these I would have to modify the settings for each of my network sites separately. Annoying but totally doable. 

Thanks for the quick and easy solution today!

Gets the job done

Selectively protect passwords from being reset or modified.

Disable Reset Password vs Plainview Protect Passwords