[buddypress-trac] [BuddyPress Trac] #7173: Signing up with a blog makes it impossible for the user to log in

buddypress-trac noreply at wordpress.org
Tue Jul 5 22:17:05 UTC 2016


#7173: Signing up with a blog makes it impossible for the user to log in
--------------------------+-----------------------------
 Reporter:  imath         |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  high          |  Milestone:  Awaiting Review
Component:  Registration  |    Version:
 Severity:  major         |   Keywords:  has-patch
--------------------------+-----------------------------
 WordPress Multisite, blog and user signups on.
 Register, activate. Then try to log in: it's impossible.

 Problem is:
 When the user registers he defines a password, we hash it into the signups
 table meta field. So we can't use `wp_update_user()`, else password would
 be hashed 2 times. So we're running an Update query to set the password.

 It appears for this particular case that when `xprofile_sync_wp_profile()`
 hooks to `bp_core_activated_user()` the wp_update_user() function is using
 the cached user and the password WordPress generated automatically.

 In the attached patch, i've also remove a `wp_update_user()` call (just
 before the query to update the password) as it's not necessary precisely
 because of `xprofile_sync_wp_profile()`.

 As i'm a bit lost with what milestone to put this ticket in, i leave you
 choose. But imho we should fix this asap.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7173>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list