[wp-trac] [WordPress Trac] #36546: user marked as spam can log in

[WordPress Trac]

#36546: user marked as spam can log in
----------------------------------------+------------------------------
 Reporter:  websupporter                |       Owner:
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  Awaiting Review
Component:  Login and Registration      |     Version:  3.7
 Severity:  normal                      |  Resolution:
 Keywords:  has-patch needs-unit-tests  |     Focuses:  multisite
----------------------------------------+------------------------------

Comment (by websupporter):

 I had a second look into the `wp_authenticate_spam_check()` and was
 wondering. I found this problem, when I tried to patch #24617. We
 discussed over there, if we should let the user know, he is marked as
 spam:

 >Let's change the error text to something more generic so that we're not
 necessarily passing that info on to the user. ticket:24617#comment:10


 We decided to go with a standard message instead. I was now wondering
 about the message, returned by `wp_authenticate_spam_check()`:

 `Your account has been marked as a spammer`

 Maybe, we should use also here something more generic to keep it
 consistent. We could keep the error code (in regards to #19445), but
 return to the user something like "Your account has been disabled"?

 Any thoughts here?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36546#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform