[wp-trac] [WordPress Trac] #37195: Validate usernames only once in a multisite signup

WordPress Trac noreply at wordpress.org
Mon Jun 27 06:42:44 UTC 2016


#37195: Validate usernames only once in a multisite signup
-------------------------+-----------------------------
 Reporter:  arkimedia    |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  General      |    Version:  4.5.3
 Severity:  normal       |   Keywords:
  Focuses:               |
-------------------------+-----------------------------
 In wpmu_validate_user_signup function there is a double validation for
 allowed username.

 First, the username is passed in to a sanitize_user function and after
 that tested with {{{preg_match( '/[^a-z0-9]/', $user_name );}}}

 Latter test is more strict than the one used in sanitize user function and
 doesn't allow for example uppercase characters or dots.

 I think that the latter test is unnecessary. If it can't be removed, we
 should add filter for it.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37195>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list