[wp-trac] [WordPress Trac] #44347: WP allows creating username that is already used email address

WordPress Trac noreply at wordpress.org
Sat Mar 2 02:03:26 UTC 2019


#44347: WP allows creating username that is already used email address
-------------------------------------------------+-------------------------
 Reporter:  phillipburger                        |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Users                                |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch dev-feedback 2nd-opinion   |     Focuses:
  needs-testing needs-unit-tests                 |
-------------------------------------------------+-------------------------
Changes (by garrett-eclipse):

 * keywords:  has-patch => has-patch dev-feedback 2nd-opinion needs-testing
     needs-unit-tests


Comment:

 Thanks @phillipburger & @subrataemfluence for working on this.

 I came across this ticket while reviewing #44683 and definitely find it
 odd that emails can be used as usernames.

 The initial checks being worked on here are a great help and will help
 reduce confusion and potential issues in other areas like the Privacy
 tools which has a single input for username or email which brings light to
 this issue all the more.

 In my opinion usernames should block the use of emails as usernames. It
 creates potential issues as have been noted here.
 Barring simply prohibiting the use of emails as usernames then they should
 be restricted to be an exact match of the users email and there should be
 constraints put into the profile update and user edits to ensure it's a
 match or that the username is not an email.

 I've marked this for additional feedback but would love to see emails
 being prohibited as usernames or at least forced to be an exact match.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44347#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list