[wp-trac] [WordPress Trac] #17904: Multisite has more restrictions on user login character set
WordPress Trac
noreply at wordpress.org
Wed Aug 14 21:00:13 UTC 2013
#17904: Multisite has more restrictions on user login character set
--------------------------------------+------------------
Reporter: duck_ | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.7
Component: Multisite | Version: 3.0
Severity: normal | Resolution:
Keywords: needs-patch dev-feedback |
--------------------------------------+------------------
Comment (by martythornley):
Replying to [comment:14 Ipstenu]:
> I was under the understanding that the restrictions are in place because
the username is used for the default sitename slug. So to prevent bad
URLS, we sanitized everything to match.
>
> If that can be broken out of the username check and only applied to the
sitename, that would be okay.
The create_new_blog() function uses sanitize_user() to sanitize the
sitename, so the same filters used for users would be used for sites. But
I am not seeing anywhere that there is a fallback to the actual username.
During wpmu_validate_blog_signup() it checks new site names and does its
own separate lower string check.
It seems that removing the strtolower from sanitize user does the trick as
long as that is the desired effect?
--
Ticket URL: <http://core.trac.wordpress.org/ticket/17904#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list