Validation of custom fields in registration ignored
-
Hi,
I just found a quite serious security related bug I am not happy with, and I am pretty sure this is not intended behaviour. I hope I am wrong and you have a simple explanation and quick solution for this.
In my registration form, I have added a few extra fields, as instructed here: https://codex.www.ads-software.com/Customizing_the_Registration_Form
I also added some validation logic to these extra fields, following this: https://developer.www.ads-software.com/reference/hooks/registration_errors/ , and making these fields required and be formatted correctly. Normally, this is all working fine.However, with your plugin activated, the validation of these extra fields, is completely ignored. Your plugin seems to highjack the creation of the new user as soon as the username and email address fields are validated by WordPress itself, but then completely bypasses the added validation to the $errors object for the extra custom fields.
Please address this. Thank you.
- The topic ‘Validation of custom fields in registration ignored’ is closed to new replies.