[wp-trac] [WordPress Trac] #28157: Using Email Address as username fails on Recovery Password

WordPress Trac noreply at wordpress.org
Wed May 7 11:47:53 UTC 2014


#28157: Using Email Address as username fails on Recovery Password
--------------------------+-----------------------------
 Reporter:  xomero        |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Users         |     Version:  3.9
 Severity:  normal        |  Resolution:  duplicate
 Keywords:                |     Focuses:  administration
--------------------------+-----------------------------
Description changed by SergeyBiryukov:

Old description:

> When you create an user with an Email address as username, let me say
> "a at email.com" and put "b at email.com" as User's Email Address, when you go
> to "Lost  Password" it asks for "Username or E-mail:", if you type
> "a at email.com" it will fail saying: "ERROR: There is no user registered
> with that email address." What it is technically true, but "a at email.com"
> it is an Username, so I must be allowed to Recover my Password.
>
> The defect is that, if the username it looks like an email address,
> wordpress will only check if the string it is a registered email address
> in the Blog, is not checking if an user with an username like this
> exists.

New description:

 When you create an user with an Email address as username, let me say
 `a at email.com` and put `b at email.com` as User's Email Address, when you go
 to "Lost  Password" it asks for "Username or E-mail", if you type
 `a at email.com` it will fail saying: "ERROR: There is no user registered
 with that email address." What it is technically true, but `a at email.com`
 it is an Username, so I must be allowed to Recover my Password.

 The defect is that, if the username it looks like an email address,
 WordPress will only check if the string it is a registered email address
 in the Blog, is not checking if an user with an username like this exists.

--

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28157#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list