[wp-trac] [WordPress Trac] #17904: Multisite has more restrictions on user login character set

WordPress Trac noreply at wordpress.org
Wed Aug 14 21:00:13 UTC 2013


#17904: Multisite has more restrictions on user login character set
--------------------------------------+------------------
 Reporter:  duck_                     |       Owner:
     Type:  defect (bug)              |      Status:  new
 Priority:  normal                    |   Milestone:  3.7
Component:  Multisite                 |     Version:  3.0
 Severity:  normal                    |  Resolution:
 Keywords:  needs-patch dev-feedback  |
--------------------------------------+------------------

Comment (by martythornley):

 Replying to [comment:14 Ipstenu]:
 > I was under the understanding that the restrictions are in place because
 the username is used for the default sitename slug. So to prevent bad
 URLS, we sanitized everything to match.
 >
 > If that can be broken out of the username check and only applied to the
 sitename, that would be okay.

 The create_new_blog() function uses sanitize_user() to sanitize the
 sitename, so the same filters used for users would be used for sites. But
 I am not seeing anywhere that there is a fallback to the actual username.
 During wpmu_validate_blog_signup() it checks new site names and does its
 own separate lower string check.

 It seems that removing the strtolower from sanitize user does the trick as
 long as that is the desired effect?

--
Ticket URL: <http://core.trac.wordpress.org/ticket/17904#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list