[wp-trac] [WordPress Trac] #55831: Username restrictions for networks are more stringent than for single-site

[WordPress Trac]

#55831: Username restrictions for networks are more stringent than for single-site
--------------------------------+-----------------------------
 Reporter:  desmith             |      Owner:  (none)
     Type:  defect (bug)        |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  Networks and Sites  |    Version:  5.9.3
 Severity:  normal              |   Keywords:
  Focuses:  multisite           |
--------------------------------+-----------------------------
 When you create a new user on a single-site install, the username is run
 through sanitize_user() which imposes a few restrictions on what the
 username can look like, what characters can be part of a username, etc.

 When you create a new user on a network, the username is run through
 wpmu_validate_user_signup() which imposes much more strict restrictions on
 a username. That function runs the username through sanitize_user(), but
 then also forces the username to be a minimum of four characters long,
 prevents the username from having a period or @ (so no email addresses as
 username), prevents the username from being strictly numeric, etc.

 While testing out something for a network, I took a site that had several
 users whose usernames didn't meet those more strict requirements, turned
 the site to a multisite, and at first glance nothing broke -- the users
 created before I switched the site to a network, with usernames that
 violated these restrictions, appear to work just fine, can be assigned
 roles on sites, can be super-admins, and so on.

 Are there reasons I can't see, that users created after a WP install is
 switched to a network, have more restrictions on their username than users
 for single-site installs? Is it feasible to make the restrictions for
 network users' usernames to match those of a single-site?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/55831>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform