Changeset 40594 for trunk/src/wp-includes/ms-functions.php

Timestamp:

05/09/2017 04:32:53 PM (8 years ago)

Author:

jeremyfelt

Message:

Multisite: Validate email before checking against banned domains.

Previously, an invalid email could result in an undefined index when attempting to determine the email domain.

Props ocean90.
See #39915.

File:

• trunk/src/wp-includes/ms-functions.php (modified) (2 diffs)

trunk/src/wp-includes/ms-functions.php

@@ -443 +443 @@
     }
 
-    if ( is_email_address_unsafe( $user_email ) )
-        $errors->add('user_email',  __('You cannot use that email address to signup. We are having problems with them blocking some of our email. Please use another email provider.'));
+    if ( ! is_email( $user_email ) ) {
+        $errors->add( 'user_email', __( 'Please enter a valid email address.' ) );
+    } elseif ( is_email_address_unsafe( $user_email ) ) {
+        $errors->add( 'user_email', __( 'You cannot use that email address to signup. We are having problems with them blocking some of our email. Please use another email provider.' ) );
+    }
 
     if ( strlen( $user_name ) < 4 )
@@ -456 +459 @@
     if ( preg_match( '/^[0-9]*$/', $user_name ) )
         $errors->add('user_name', __('Sorry, usernames must have letters too!'));
-
-    if ( !is_email( $user_email ) )
-        $errors->add('user_email', __( 'Please enter a valid email address.' ) );
 
     $limited_email_domains = get_site_option( 'limited_email_domains' );