Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Username Availability Checker issue

Tagged: 

  • Participant
    Level: Initiated
    Posts: 9
    Mac Eckett on October 6, 2019 at 3:01 am #25698

    Hi,
    I got a bug. When i register a username as : “ianjohnson” it s ok, it s available. Then i try to register with : “Ian Johnson”, with a space between both and i see the message “Congrats ….” it’s available, when i fill all other fields and i submit the form i see on top of the form ” username aleady exists”

    How can i fix this bug please ?
    Many thanks for your help
    Mac

  • Keymaster
    (BuddyDev Team)
    Posts: 24697
    Brajesh Singh on October 6, 2019 at 3:12 am #25699

    Hi Mac,
    Thank you for opening a new topic. I appreciate it.

    1. Are you on a normal WordPress site or multisite?
    2. Are you using any other plugin that may affect registration/username?

    Please let me know and I will assist.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 9
    Mac Eckett on October 6, 2019 at 3:50 am #25700

    Hi,

    I’m using a normal WordPress site (buddypress).
    Using those plugins, don’t know if there is no compatibility

    – BuddyPress Xprofile Custom Field Types
    – Smart WP Login
    – Username Changer
    – WordPress Username Availability Checker (your plugin)
    – BuddyPress Profile Pro

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24697
    Brajesh Singh on October 6, 2019 at 12:47 pm #25706

    Thank you Mac,
    I will be getting back in couple of hours with more details.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 9
    Mac Eckett on October 9, 2019 at 4:36 am #25798

    Hi,

    Please, i m still waiaitng for you, with more details, like you said.

    Many thanks

    Mac

  • Keymaster
    (BuddyDev Team)
    Posts: 24697
    Brajesh Singh on October 9, 2019 at 8:24 pm #25816

    Hi Mac,
    Please upgrade to 1.1.6 and let me know if that works for you or not?

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 9
    Mac Eckett on October 11, 2019 at 12:56 am #25834

    Hi,

    Thanks for the update but it s not working. Still got the massage “Congrats …” when i tried to register
    “ian johnson”, ianjohnson is already register.

    Thanks for your help

  • Keymaster
    (BuddyDev Team)
    Posts: 24697
    Brajesh Singh on October 11, 2019 at 1:11 am #25835

    Hi Mac,
    Are you using BuddyPress registration?

  • Participant
    Level: Initiated
    Posts: 9
    Mac Eckett on October 11, 2019 at 1:25 am #25836

    Ho,

    Yes i do. the issue is when i put a space between name and surname

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24697
    Brajesh Singh on October 11, 2019 at 1:40 am #25837

    Hi Mac,
    Thank you.

    The usernames will be treated different on a normal WordPress install. “ian johnson” becomes “ian-johnson” for nice name.

    The problem is BuddyPress is removing the space before inserting user

    
$user_login     = preg_replace( '/\s+/', '', sanitize_user( $user_login, true ) );

    This was unexpected.

    Anyway, I will push a release today or tomorrow with this fix and will let you know.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: resolved