Bug #8979
closed
Already used email address validation being skipped
Added by krileon over 2 years ago.
Updated over 2 years ago.
Description
Due to the order of events the validation for already existing email address is skipped during reconfirmation attempt. Note this will fail as it should, but it should not be asking them to confirm an email change they can't possibly complete.
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Only Joomla's user store validation wasn't stopping email confirmation from sending its email (you still can't confirm into an existing email! so no security issue!). This was due to how late that check is (during Joomla user store) as it's not in the field validation behavior. Implementing a check to see if email exists already resolves this.
- Status changed from Resolved to Closed
Also available in: Atom
PDF