Ticket #41314: #41314.patch

src/wp-admin/admin-ajax.php

@@ -64 +64 @@
         'parse-media-shortcode', 'destroy-sessions', 'install-plugin', 'update-plugin', 'press-this-save-post',
         'press-this-add-category', 'crop-image', 'generate-password', 'save-wporg-username', 'delete-plugin',
         'search-plugins', 'search-install-plugins', 'activate-plugin', 'update-theme', 'delete-theme',
-        'install-theme', 'get-post-thumbnail-html', 'get-community-events',
+        'install-theme', 'get-post-thumbnail-html', 'get-community-events','validate-user-email',
 );
 
 // Deprecated

src/wp-admin/includes/ajax-actions.php

@@ -3982 +3982 @@
 
         wp_send_json_success( $status );
 }
+
+/**
+ * Ajax handler for validating user profile's data.
+ *
+ * @since 4.8.0
+ */
+function wp_ajax_validate_user_email() {
+        if ( ! current_user_can( 'edit_users' ) )
+                wp_die( -1 );
+
+        require_once ABSPATH . 'wp-admin/includes/user.php';
+
+        _wp_ajax_validate_user_email( $_POST );
+
+        wp_die();
+}

src/wp-admin/includes/user.php

@@ -213 +213 @@
 }
 
 /**
+ * Validate the user's email entered in their profile
+ *
+ * @since 4.9.0
+ *
+ * @return json object
+ */
+function _wp_ajax_validate_user_email( $request = array() ){
+
+        if ( isset( $request['email-address'] ))
+                $user_email = sanitize_text_field( wp_unslash( $request['email-address'] ) );
+
+        if ( isset( $request['user-id'] ) ) 
+                $user_id = $request['user-id'];
+
+                /* checking email address */
+        if ( empty( $user_email ) ) {
+                $error = __( '<strong>ERROR</strong>: Please enter an email address.' );
+        } elseif ( !is_email( $user_email ) ) {
+                $error = __( '<strong>ERROR</strong>: The email address isn&#8217;t correct.' );
+        } elseif ( ( $owner_id = email_exists($user_email) ) && $owner_id != $user_id ) {
+                $error = __('<strong>ERROR</strong>: This email is already registered, please choose another one.');
+        }
+
+        echo wp_json_encode(
+                array(
+                        'validated' => isset( $error ) ? false : true,
+                        'error'     => isset( $error ) ? $error : 'noerror'
+                )
+        );
+
+}
+
+/**
  * Fetch a filtered list of user roles that the current user is
  * allowed to edit.
  *

new file src/wp-admin/js/user-profile-validator.js

@@ +1 @@
+(function($){
+
+        // Bind an action to form submission
+        $( 'form' ).on( 'submit', validationHandler );
+
+        function validationHandler ( e ){
+
+                // Prevent the from from being submitted
+                e.preventDefault(); 
+
+                // Set the default values for error indicators
+                var nicknameError = passwordError = false;
+
+                // Check if nickname is empty
+                if ( ! $('#nickname').val() ){
+
+                        // Print an error message if there isn't already one
+                        if ( ! $('#nickname-error').length ) 
+                                $( '#your-profile' ).before( '<div id="nickname-error" class="error"><p>' + userProfileValidatorL10n.empty_nickname + '</p></div>' );
+
+                        // Scroll up to the message
+                        $( 'html,body' ).animate({
+                                scrollTop:0
+                                },0
+                        );
+
+                        // The nickname has error
+                        nicknameError = true;
+                } else {
+
+                        // If the nickname is fine, remove any existing error
+                        if ( $('#nickname-error').length ) $('#nickname-error').remove();
+                }
+
+                // If the password contains '\', disable the form submission
+                if ( $( '#pass1' ).val().includes("\\") ) {
+
+                        // Print an error if there is not already one
+                        if ( ! $('#password-error').length )
+                                $( '#your-profile' ).before( '<div id="password-error" class="error"><p>' + userProfileValidatorL10n.invalid_password + '</p></div>' );
+
+                        // Scroll to the message
+                        $( 'html,body' ).animate({
+                                scrollTop:0
+                                },0
+                        );
+
+                        // There is an error in the password
+                        passwordError = true;
+
+                } else {
+
+                        // The password is fine, remove any existing error message
+                        if( $('#password-error').length ) $('#password-error').remove();
+
+                }
+
+                // Check if the email is valid by doing an AJAX request. Set the parameters for the request
+                params = {
+                        'action': 'validate-user-email',                // AJAX handler for verifying email
+                        'email-address': $( '#email' ).val(),   // Entered email address
+                        'user-id': $('#user_id').val(),                 // Current user's ID
+                };
+
+                // Send the request to the server
+                $.post( ajaxurl, params, function(resp) {
+                        processAjaxEmailValidation(resp, nicknameError, passwordError);
+                },"json");
+        };
+
+        // Process the AJAX response and form submission
+        function processAjaxEmailValidation(resp, nicknameError, passwordError){
+
+                // If the email is valid
+                if ( true == resp.validated ) {
+
+                        // Remove current error message if any
+                        if ( $('#email-error').length ) $('#email-error').remove();
+
+                        // If password and nickname are valid too, submit the form
+                        if ( ! nicknameError && ! passwordError ) {
+
+                                // Unbind the handler
+                                $( 'form' ).off( 'submit', validationHandler );
+
+                                //Submit the form
+                                $('form').submit();
+                        }
+
+                } else if ( false == resp.validated ) { // If the email is invalid, then print a proper error
+
+                        // Remove existing error messages
+                        if ( $('#email-error').length ) $('#email-error').remove();
+
+                        // Print the proper error
+                        $( '#your-profile' ).before( '<div id="email-error" class="error"><p>' + resp.error + '</p></div>' );
+
+                        // Scroll to the message
+                        $( 'html,body' ).animate({
+                                scrollTop:0
+                                },0
+                        );
+                }
+        }
+})(jQuery);
+ No newline at end of file

src/wp-admin/user-edit.php

@@ -24 +24 @@
         wp_die( __('Invalid user ID.') );
 
 wp_enqueue_script('user-profile');
+wp_enqueue_script('user-profile-validator');
 
 if ( IS_PROFILE_PAGE ) {
         $title = __( 'Profile' );

src/wp-includes/script-loader.php

@@ -419 +419 @@
                 'ariaHide' => esc_attr__( 'Hide password' ),
         ) );
 
+        $scripts->add( 'user-profile-validator', "/wp-admin/js/user-profile-validator$suffix.js", array( 'jquery' ), false, 1 );
+        did_action( 'init' ) && $scripts->localize( 'user-profile-validator', 'userProfileValidatorL10n', array(
+                'empty_nickname'   => __( '<strong>ERROR</strong>: Please enter a nickname.' ),
+                'invalid_password' => __( '<strong>ERROR</strong>: Passwords may not contain the character "\\".' ),
+        ) );
         $scripts->add( 'language-chooser', "/wp-admin/js/language-chooser$suffix.js", array( 'jquery' ), false, 1 );
 
         $scripts->add( 'user-suggest', "/wp-admin/js/user-suggest$suffix.js", array( 'jquery-ui-autocomplete' ), false, 1 );