Changeset 9167 for sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php

Timestamp:

10/09/2019 07:07:07 AM (5 years ago)

Author:

dd32

Message:

Login: Require a valid reCaptcha v3 score during registration, add reCaptcha to the account confirmation screen as well.

See #4739.

File:

• sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php (modified) (3 diffs)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php

@@ -42 +42 @@
 }
 
+// Check reCaptcha status
+$error_recapcha_status = false;
+if ( isset( $_POST['user_pass'] ) ) {
+    if ( ! wporg_login_check_recapcha_status( 'pending_create' ) ) {
+        // No no. "Please try again."
+        $error_recapcha_status = true;
+        unset( $_POST['user_pass'] );
+    }
+}
+
+if ( wporg_login_save_profile_fields( $pending_user ) ) {
+    // re-fetch the user, it's probably changed.
+    $pending_user = wporg_get_pending_user( $activation_user );
+}
+
 if ( isset( $_POST['user_pass'] ) ) {
     $user_pass = wp_unslash( $_POST['user_pass'] );
@@ -52 +67 @@
         }
     }
-
-    wporg_login_save_profile_fields();
 
     wp_safe_redirect( 'https://wordpress.org/support/' );
@@ -91 +104 @@
         include __DIR__ . '/partials/register-profilefields.php';
     ?>
+    <?php
+        if ( $error_recapcha_status ) {
+            echo '<div class="message error"><p>' . __( 'Please try again.', 'wporg' ) . '</p></div>';
+        }
+    ?>
 
     <p class="login-submit">
-        <input type="submit" name="wp-submit" id="wp-submit" class="button button-primary" value="<?php esc_attr_e( 'Create Account', 'wporg' ); ?>" />
+        <input data-sitekey="<?php echo esc_attr( RECAPTCHA_INVIS_PUBKEY ); ?>" data-callback='onSubmit' type="submit" name="wp-submit" id="wp-submit" class="g-recaptcha button button-primary button-large" value="<?php esc_attr_e( 'Create Account', 'wporg' ); ?>" />
     </p>