[wp-trac] [WordPress Trac] #38897: user_email with & (ampersand) being encoded within the database making notifications fail
WordPress Trac
noreply at wordpress.org
Tue Nov 22 01:24:46 UTC 2016
#38897: user_email with & (ampersand) being encoded within the database making
notifications fail
-----------------------------+-----------------------------
Reporter: garrett-eclipse | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Users | Version: 4.6.1
Severity: normal | Keywords:
Focuses: |
-----------------------------+-----------------------------
Hello,
It seems Wordpress does some encoding on the email field which causes
issues as the encoded email is stored in the database and causes
notifications to fail as it's no longer a valid email.
The specific email i noticed this with had an ampersand (&) within the
email, the following is a bogus one to illustrate;
johnny&joey at telus.net
This is apparently a valid email according to telus.net (as the email
exists there, not that exact one of course) and according to IETF Trust as
shown in this stack overflow answer;
http://stackoverflow.com/a/2049510
Anyway, if you register a user with an email containing & it will encode
it into the database and fail to deliver the password notification.
The following should NOT be encoded;
"Characters ! # $ % & ' * + - / = ? ^ _ ` { | } ~
Character . (dot, period, full stop) provided that it is not the first or
last character, and provided also that it does not appear two or more
times consecutively."
Thank you
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38897>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list