[wp-trac] [WordPress Trac] #14767: wp_create_user() does not check for a valid email address

WordPress Trac wp-trac at lists.automattic.com
Mon Nov 29 03:16:11 UTC 2010


#14767: wp_create_user() does not check for a valid email address
--------------------------+-------------------------------------------------
 Reporter:  mrwiblog      |       Owner:                                     
     Type:  defect (bug)  |      Status:  new                                
 Priority:  normal        |   Milestone:  3.1                                
Component:  Users         |     Version:  3.0.1                              
 Severity:  normal        |    Keywords:  wp_create_user, is_email, has-patch
--------------------------+-------------------------------------------------

Comment(by jonkirkman):

 Replying to [comment:4 filosofo]:
 > Replying to [comment:3 nacin]:
 > > We should make email addresses required and enforce uniqueness.
 >
 > I think we should consider doing the opposite: making email addresses
 just another user datum, like URL.  The current system, which de facto
 requires email addresses, makes it tricky to implement authorization or
 authentication protocols such as OAuth or OpenID that don't necessarily
 get you a user's email address.
 >
 > Aside from emailing password resets (which is not needed for sites
 accepting those protocols), there's not much reason for core WP to require
 email addresses.

 I agree with Filosofo. This seems to be more of an issue with
 email_exists() not being cope with being passed an empty string which is
 the default behavior of some of the functions which rely upon it. If
 email_exists() is passed an empty string, perhaps it automatically return
 false without searching the users table.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/14767#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list