[wp-trac] [WordPress Trac] #44347: WP allows creating username that is already used email address

WordPress Trac noreply at wordpress.org
Wed Jun 13 14:31:54 UTC 2018


#44347: WP allows creating username that is already used email address
---------------------------+------------------------------
 Reporter:  phillipburger  |       Owner:  (none)
     Type:  enhancement    |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Users          |     Version:
 Severity:  normal         |  Resolution:
 Keywords:  has-patch      |     Focuses:
---------------------------+------------------------------

Comment (by phillipburger):

 To me the solutions look good, but I definitely want some other people to
 input here since I have never been involved in any changes to core WP.

 Also, what are thoughts on situations where this already exists in a
 deployment that is upgraded to a version where this is included? The
 usernames that match email may already be in place, should there be some
 place that has a small warning about potential overlaps and allow the
 admin to correct the situation? I know that could be hard since usernames
 are not editable and typically an email address is not going to be
 something someone will change on an account.

 Last thought for now - because these checks are only checking for existing
 data in the user portion of the database, if someone creates an account
 where username and email address are the same - that is still acceptable
 and will pass these checks, right?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44347#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list