check if blog-user collides with a username (#471)

* check if blog-user collides with a username

See #470

* added changes proposed by @mattwiebe
This commit is contained in:
Matthias Pfefferle 2023-09-28 09:15:48 +02:00 committed by GitHub
parent 4cec52189a
commit 0b8997d4ff
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,9 @@
<?php
namespace Activitypub;
use WP_User_Query;
use Activitypub\Model\Blog_User;
/**
* ActivityPub Admin Class
*
@ -168,7 +171,7 @@ class Admin {
'type' => 'string',
'description' => \esc_html__( 'The Identifier of the Blog-User', 'activitypub' ),
'show_in_rest' => true,
'default' => \Activitypub\Model\Blog_User::get_default_username(),
'default' => Blog_User::get_default_username(),
'sanitize_callback' => function( $value ) {
// hack to allow dots in the username
$parts = explode( '.', $value );
@ -178,7 +181,31 @@ class Admin {
$sanitized[] = \sanitize_title( $part );
}
return implode( '.', $sanitized );
$sanitized = implode( '.', $sanitized );
// check for login or nicename.
$user = new WP_User_Query(
array(
'search' => $sanitized,
'search_columns' => array( 'user_login', 'user_nicename' ),
'number' => 1,
'hide_empty' => true,
'fields' => 'ID',
)
);
if ( $user->results ) {
add_settings_error(
'activitypub_blog_user_identifier',
'activitypub_blog_user_identifier',
\esc_html__( 'You cannot use an existing author\'s name for the blog profile ID.', 'activitypub' ),
'error'
);
return Blog_User::get_default_username();
}
return $sanitized;
},
)
);