[wp-trac] [WordPress Trac] #38432: Validate user creation and email change by token
WordPress Trac
noreply at wordpress.org
Fri Oct 21 13:34:32 UTC 2016
#38432: Validate user creation and email change by token
-------------------------+-----------------------------
Reporter: lriaudel | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Users | Version: 4.6.1
Severity: normal | Keywords:
Focuses: |
-------------------------+-----------------------------
When you register on a wordpress site or when you change your email, we
can use a fake email (or error entry) and it create ghost profile. I see
36 bad profile in 2 month on a website.
If an email is send with a validate links (token), the profile or the
email change can be executed.
It secure correct data.
Thanks
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38432>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list