[wp-trac] [WordPress Trac] #56090: wp_update_user doesn't update user_activation_key on users with apostrophes in their email

WordPress Trac noreply at wordpress.org
Tue Jun 28 17:33:30 UTC 2022


#56090: wp_update_user doesn't update user_activation_key on users with apostrophes
in their email
--------------------------+-----------------------------
 Reporter:  petercwiley   |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Wordpress currently allows apostrophes in email addresses. However, when a
 user with an apostrophe in their email tries to perform a password reset,
 the user_activation_key is invalid.

 It looks as if user_activation_keys can be generated for users with
 apostrophes in their email, but the key cannot be stored in the wp_user
 table.

 I've tried manually setting user_activation_keys for users with
 apostrophes by calling wp_update_user to no avail.

 Why is this? Is there a way to bypass the get_password_reset_key for users
 with apostrophe emails?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56090>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list