[buddypress-trac] [BuddyPress Trac] #7173: Signing up with a blog makes it impossible for the user to log in
buddypress-trac
noreply at wordpress.org
Tue Jul 5 22:17:05 UTC 2016
#7173: Signing up with a blog makes it impossible for the user to log in
--------------------------+-----------------------------
Reporter: imath | Owner:
Type: defect (bug) | Status: new
Priority: high | Milestone: Awaiting Review
Component: Registration | Version:
Severity: major | Keywords: has-patch
--------------------------+-----------------------------
WordPress Multisite, blog and user signups on.
Register, activate. Then try to log in: it's impossible.
Problem is:
When the user registers he defines a password, we hash it into the signups
table meta field. So we can't use `wp_update_user()`, else password would
be hashed 2 times. So we're running an Update query to set the password.
It appears for this particular case that when `xprofile_sync_wp_profile()`
hooks to `bp_core_activated_user()` the wp_update_user() function is using
the cached user and the password WordPress generated automatically.
In the attached patch, i've also remove a `wp_update_user()` call (just
before the query to update the password) as it's not necessary precisely
because of `xprofile_sync_wp_profile()`.
As i'm a bit lost with what milestone to put this ticket in, i leave you
choose. But imho we should fix this asap.
--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7173>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac
More information about the buddypress-trac
mailing list