Changeset 9146 for sites/trunk/common/includes/wporg-sso/wp-plugin.php

Timestamp:

09/23/2019 03:52:23 AM (5 years ago)

Author:

dd32

Message:

Login: Store user registrations in a custom table until they confirm their email address (at which time, we create the actual wp_users records).

This is to combat the significant number of unconfirmed accounts that are created, by separating them it's easier to purge them periodically, but also easier to add extra anti-spam checks as needed.

See #4739.

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (1 diff)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -145 +145 @@
             // Extend registration paths only when registration is open.
             if ( 'user' === get_site_option( 'registration', 'none' ) ) {
+                // New "pending" registration flow.
+                $this->valid_sso_paths['pending-profile']  = '/register/create-profile/(?P<profile_user>[^/]+)/(?P<profile_key>[^/]+)';
+                $this->valid_sso_paths['pending-create']   = '/register/create/(?P<confirm_user>[^/]+)/(?P<confirm_key>[^/]+)';
+
+                // Old "Create immediately" flow, kept as in-progress registrations need it.
                 $this->valid_sso_paths['register-profile'] = '/register/profile/(?P<profile_user>[^/]+)/(?P<profile_nonce>[^/]+)';
                 $this->valid_sso_paths['register-confirm'] = '/register/confirm/(?P<confirm_user>[^/]+)/(?P<confirm_key>[^/]+)';
+
+                // Primary registration route.
                 $this->valid_sso_paths['register']         = '/register';
             }