https://lhero.org/portfolio/lh-user-provisioning/ Helping Organisations get organised! Sun, 13 Sep 2026 04:28:47 +0000 hourly 1 https://lhero.org/portfolio/lh-user-provisioning/#comment-1536149 Sun, 13 Sep 2026 04:28:47 +0000 https://lhero.org/?post_type=lh-portfolio&p=147301#comment-1536149 Trim readme.md down to the minimal rule-2 shape (one-paragraph description, installation, links to the canonical portfolio doc home and changelog doc-section) now that full documentation lives in lh-portfolio.

]]> https://lhero.org/portfolio/lh-user-provisioning/#comment-1536148 Tue, 25 Aug 2026 10:00:00 +0000 https://lhero.org/?post_type=lh-portfolio&p=147301#comment-1536148 Two changes. First, ensure_nicename_matches_id() now writes via a direct SQL UPDATE instead of wp_update_user() — this is the actual fix for the 1.2.1 collision bug (that release added a guard, but the underlying write still routed through wp_update_user(), whose nicename-uniqueness dedup logic was found to still misfire against a user’s own already-correct nicename in some cases, since that logic is designed for human-chosen slugs that can legitimately collide and a numeric ID-derived nicename never can). Second, added user_register/profile_update hooks (priority 20) so login-matches-email and nicename-matches-ID are now enforced in real time for every user created or updated anywhere on the network, not just accounts provisioned through this plugin’s own API — both guarded, both raw SQL, so a no-op check is a single cached read and there’s no re-entrancy risk. This supersedes the old standalone “LH Email Usernames” plugin, which can now be deactivated/removed.

]]>