Making WordPress.org


Ignore:
Timestamp:
09/23/2019 03:52:23 AM (4 years ago)
Author:
dd32
Message:

Login: Store user registrations in a custom table until they confirm their email address (at which time, we create the actual wp_users records).

This is to combat the significant number of unconfirmed accounts that are created, by separating them it's easier to purge them periodically, but also easier to add extra anti-spam checks as needed.

See #4739.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • sites/trunk/common/includes/wporg-sso/wp-plugin.php

    r7695 r9146  
    145145            // Extend registration paths only when registration is open.
    146146            if ( 'user' === get_site_option( 'registration', 'none' ) ) {
     147                // New "pending" registration flow.
     148                $this->valid_sso_paths['pending-profile']  = '/register/create-profile/(?P<profile_user>[^/]+)/(?P<profile_key>[^/]+)';
     149                $this->valid_sso_paths['pending-create']   = '/register/create/(?P<confirm_user>[^/]+)/(?P<confirm_key>[^/]+)';
     150
     151                // Old "Create immediately" flow, kept as in-progress registrations need it.
    147152                $this->valid_sso_paths['register-profile'] = '/register/profile/(?P<profile_user>[^/]+)/(?P<profile_nonce>[^/]+)';
    148153                $this->valid_sso_paths['register-confirm'] = '/register/confirm/(?P<confirm_user>[^/]+)/(?P<confirm_key>[^/]+)';
     154
     155                // Primary registration route.
    149156                $this->valid_sso_paths['register']         = '/register';
    150157            }
Note: See TracChangeset for help on using the changeset viewer.