[wp-trac] [WordPress Trac] #11548: Possible to create a user with an empty user_login using wp_insert_user

WordPress Trac wp-trac at lists.automattic.com
Mon Dec 21 15:17:17 UTC 2009


#11548: Possible to create a user with an empty user_login using wp_insert_user
--------------------------+-------------------------------------------------
 Reporter:  westi         |       Owner:  westi
     Type:  defect (bug)  |      Status:  new  
 Priority:  normal        |   Milestone:  3.0  
Component:  Users         |     Version:  2.8  
 Severity:  normal        |    Keywords:       
--------------------------+-------------------------------------------------
 The code in wp_insert_user does not check to see if the sanitised name
 which will be used for user_login is actually a useful username.

 It is therefore possible to end up with a user with an empty user_login
 which is not much use.

 This is hilighted by #10319 which talk about issues with the import and
 non-ascii usernames.

 The purpose of this ticket is to fix wp_insert_user to stop the users
 getting created.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11548>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list