vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2025-10-16 12:05:38 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Login and Registration: prevent registering with username that matches previous user email.

Browse Source 
When registering a new user, check that no existing user has an email matching the username.

Prevents a login name collision when one user registers with the email address user@test.com and a second user tries to register with the username user@test.com.

Props buutqn, dunhakdis, roytanck, ajayver.
Fixes #57394.



git-svn-id: https://develop.svn.wordpress.org/trunk@55358 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Adam Silverstein 2023-02-17 08:08:19 +00:00
parent f8ec8cfe04
commit cb5eb45fab
2 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/wp-includes/user.php
View File

@ -2123,10 +2123,16 @@ function wp_insert_user( $userdata ) {
return new WP_Error( 'user_login_too_long', __( 'Username may not be longer than 60 characters.' ) );
}
// Username must be unique.
if ( ! $update && username_exists( $user_login ) ) {
return new WP_Error( 'existing_user_login', __( 'Sorry, that username already exists!' ) );
}
// Username must not match an existing user email.
if ( email_exists( $user_login ) ) {
return new WP_Error( 'existing_user_login_as_email', __( 'Sorry, that username is not available.' ) );
}
/**
* Filters the list of disallowed usernames.
*
@ -3340,7 +3346,8 @@ function register_new_user( $user_login, $user_email ) {
$sanitized_user_login = '';
} elseif ( username_exists( $sanitized_user_login ) ) {
$errors->add( 'username_exists', __( '<strong>Error:</strong> This username is already registered. Please choose another one.' ) );
} elseif ( email_exists( $sanitized_user_login ) ) {
$errors->add( 'username_exists_as_email', __( '<strong>Error:</strong> This username is not available. Please choose another one.' ) );
} else {
/** This filter is documented in wp-includes/user.php */
$illegal_user_logins = (array) apply_filters( 'illegal_user_logins', array() );

18
tests/phpunit/tests/user.php
View File

@ -934,6 +934,24 @@ class Tests_User extends WP_UnitTestCase {
$this->assertSame( $expected, $user->user_nicename );
}
/**
* @ticket 57394
*/
public function test_wp_insert_user_should_reject_username_that_matches_existing_user_email() {
$existing_email = get_option( 'admin_email' );
$username = wp_insert_user(
array(
'user_login' => $existing_email,
'user_email' => 'whatever@example.com',
'user_pass' => 'whatever',
'user_nicename' => 'whatever',
)
);
$this->assertWPError( $username );
$this->assertSame( 'existing_user_login_as_email', $username->get_error_code() );
}
/**
* @ticket 33793
*/