Changeset 11268

Timestamp:

10/07/2021 02:36:00 AM (3 years ago)

Author:

dd32

Message:

WordPress.org Login: Don't display the "This account is disabled" when a user attempts to login with the username 'Admin'.

Previously this code was only matching on the lowercase 'admin'.

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (1 diff)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -112 +112 @@
         public function authenticate_admin_check( $user, $user_login ) {
 
-            if ( 'admin' === $user_login ) {
+            if ( 'admin' === strtolower( $user_login ) ) {
 
                 // Returning a WP_Error from an authenticate filter doesn't block auth, as a later hooked item can return truthful.