Opened 9 years ago
Last modified 9 years ago
#40249 new defect (bug)
period as last character in username breaks activation link
| Reported by: | ilikewordpress | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | Awaiting Review |
| Component: | Login and Registration | Version: | 4.7.3 |
| Severity: | normal | Keywords: | |
| Cc: | Focuses: |
Description
Many browsers and mail clients are converting text-URLs to clickable links.
If a user chooses an username with a period at the end, the activation link in the mail could be incorrect, because the mail client thinks, the period is a punctuation character.
See this (non-working) URL for an example:
https://www.domain.de/wp-login.php?action=rp&key=XXXXXX&user=ballspieler96.
The period at the end is part of the username but not part of the URL.
Fix:
Don't use the username as last parameter. Instead use a defined parameter, which won't have periods as value (i.e. 2action" or "key")
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)