[wp-trac] [WordPress Trac] #43232: User signups should be marked `active=0` after account is deleted

WordPress Trac noreply at wordpress.org
Mon Feb 5 17:16:54 UTC 2018


#43232: User signups should be marked `active=0` after account is deleted
--------------------------+-----------------------------
 Reporter:  boonebgorges  |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Users         |    Version:  3.0
 Severity:  normal        |   Keywords:  2nd-opinion
  Focuses:  multisite     |
--------------------------+-----------------------------
 On multisites with open registration, the flow works like this:

 1. User registers as wp-signup.php, which puts an entry into `wp_signups`
 with `active=0`.
 2. When the user clicks the link in the activation email, the `wp_users`
 entry is created, and the entry in `wp_signups` is marked `active=1`.

 Later, if that user's account is deleted - ie the record is removed from
 the `wp_users` table - the record in `wp_signups` is left untouched. This
 causes problems if the user creates an account, deletes it, and then tries
 to register again using the same login or email address.
 https://core.trac.wordpress.org/browser/tags/4.9.2/src/wp-includes/ms-
 functions.php?marks=503-524#L499

 The problem goes away after two days, after which registering with info
 that matches an existing signup causes the old signup to be deleted in
 favor of the new one.

 That said, it feels like some confusion could be avoided - and the
 database kept somewhat more internally consistent - by setting `active=0`
 when an account is deleted. Does this seem reasonable to others?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43232>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list