[wp-trac] [WordPress Trac] #38432: Validate user creation and email change by token

WordPress Trac noreply at wordpress.org
Fri Oct 21 13:34:32 UTC 2016


#38432: Validate user creation and email change by token
-------------------------+-----------------------------
 Reporter:  lriaudel     |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Users        |    Version:  4.6.1
 Severity:  normal       |   Keywords:
  Focuses:               |
-------------------------+-----------------------------
 When you register on a wordpress site or when you change your email, we
 can use a fake email (or error entry) and it create ghost profile. I see
 36 bad profile in 2 month on a website.

 If an email is send with a validate links (token), the profile or the
 email change can be executed.

 It secure correct data.

 Thanks

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38432>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list