[wp-trac] [WordPress Trac] #44347: WP allows creating username that is already used email address
WordPress Trac
noreply at wordpress.org
Sat Mar 2 02:03:26 UTC 2019
#44347: WP allows creating username that is already used email address
-------------------------------------------------+-------------------------
Reporter: phillipburger | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting
| Review
Component: Users | Version:
Severity: normal | Resolution:
Keywords: has-patch dev-feedback 2nd-opinion | Focuses:
needs-testing needs-unit-tests |
-------------------------------------------------+-------------------------
Changes (by garrett-eclipse):
* keywords: has-patch => has-patch dev-feedback 2nd-opinion needs-testing
needs-unit-tests
Comment:
Thanks @phillipburger & @subrataemfluence for working on this.
I came across this ticket while reviewing #44683 and definitely find it
odd that emails can be used as usernames.
The initial checks being worked on here are a great help and will help
reduce confusion and potential issues in other areas like the Privacy
tools which has a single input for username or email which brings light to
this issue all the more.
In my opinion usernames should block the use of emails as usernames. It
creates potential issues as have been noted here.
Barring simply prohibiting the use of emails as usernames then they should
be restricted to be an exact match of the users email and there should be
constraints put into the profile update and user edits to ensure it's a
match or that the username is not an email.
I've marked this for additional feedback but would love to see emails
being prohibited as usernames or at least forced to be an exact match.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/44347#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list