Two know bugs and next 2.1.3 release logs and requests

[axew3]

It has been reported that the bug of duplicated username addition in wordpress, that happen when page reload on iframe mode.
Look this for explain: viewtopic.php?p=4358#p4358

The definitive working fix will be so provided into next coming soon 2.1.3
on /wp-content/plugins/wp-w3all-phpbb-integration/class.wp.w3all-phpbb.php
change

Code: Select all

 setcookie("w3allinsertedphpbbu", "unoinsagain", time() + 8, "/", "$w3cookie_domain"); // 8 seconds of life      
 // or on iframe reload, when login done into iframe and user added at same time into WP first time, this will fire again onreload, despite any check done above
 if (!isset($_COOKIE['w3allinsertedphpbbu'])) {
  $user_id = wp_insert_user( $userdata );
 }

into

Code: Select all

  $user_id = wp_insert_user( $userdata );
 // or on iframe reload, when login done into iframe and user added at same time into WP first time, this will fire again onreload, despite any check done above
  $w3_ins_user = true;

and line

Code: Select all

 if( isset($_SERVER['REQUEST_URI']) && !empty($wp_w3all_forum_folder_wp) && strstr($_SERVER['REQUEST_URI'], $wp_w3all_forum_folder_wp) ){

into

Code: Select all

 if( !isset($w3_ins_user) && isset($_SERVER['REQUEST_URI']) && !empty($wp_w3all_forum_folder_wp) && strstr($_SERVER['REQUEST_URI'], $wp_w3all_forum_folder_wp) ){

that definitively will resolve the problem for the moment.

On some php version like 7.1.11

Code: Select all

password_hash($password, PASSWORD_ARGON2I);

lead to this error when password reset or user register.
The warning do not cause the wrong execution , all should run smooth by the way, despite the error message may display.

Warning: password_hash() expects parameter 2 to be integer, string given in /w3/wp-content/plugins/wp-w3all-phpbb-integration/wp_w3all.php on line 696

[axew3]

Code: Select all

== Changelog ==

= 2.1.3 =
*Release Date - 29 Gen, 2020*
* Fix: Bug. Duplicated user in WordPress with a temporary (but working) trick. The problem seem to come out due to this: https://wordpress.org/support/topic/wp_insert_user-on-init-duplicate-created-user/
* Fix: Possible loop when user result with valid phpBB cookies/session, but deactivated in phpBB

check this:
https://wordpress.org/support/topic/wp_ ... ated-user/

The bug has been fixed in the while, with a secure trick