This plugin allows you to restrict the usernames that new users may use when registering for your site.
If open registration is enabled for your site (via Settings -> General -> Membership ("Anyone can register")), WordPress allows visitors to register for an account on your blog. By default, any username they choose is allowed so long as it isn't an already existing account and it doesn't include invalid (i.e. non-alphanumeric) characters.
Possible reasons for wanting to restrict certain usernames:
- Prevent usernames that contain foul, offensive, or otherwise undesired words
- Prevent squatting on usernames that you may want to use in the future (but don't want to actually create the account for just yet) (essentially placing a hold on the username)
- Prevent official-sounding usernames from being used (i.e. help, support, pr, info, sales)
- Prevent official username syntax from being used (i.e. if all of your administrators use a prefix to identify themselves, you don't want a visitor to use that prefix)
- Prevent spaces from being used in a username (which WordPress allows by default)
- Require that a username starts with, ends with, or contain one of a set of substrings (i.e. "support_", "admin_")
- Require a minimum number of characters for usernames
- Limit usernames to a maximum number of characters
When attempting to register with a restricted username, the visitor will be given an error notice that says:
ERROR: This username is invalid. Please enter a valid username.
NOTE: This plugin does not put any restrictions on usernames that the admin chooses for users when creating user accounts from within the WordPress admin. This only restricts the names that users choose themselves when registering for your site.
SPECIAL NOTE: Many membership plugins implement their own user registration handling that often bypasses checks (and hooks) performed by WordPress. As such, it is unlikely that the plugin is compatible with them without special plugin-specific amendments.
Compatible with Multisite and BuddyPress as well.
Links:
Plugin Homepage |
Plugin Directory Page |
GitHub |
Author Homepage
3.7 (2018-06-19)
Highlights:
- This release fixes a few bugs (notably one preventing username restrictions from working well for BuddyPress and Multisite) and makes numerous behind-the-scenes changes.
Details:
- Fix: Correct inverted conditional logic that prevented restrictions from being enforced for BuddyPress and Multisite
- Fix: Make restricted usernames and partial usernames case insensitive for comparisons
- Fix: Make username testing input field responsive
- Change: Update plugin framework to 048
- 048:
- When resetting options, delete the option rather than setting it with default values
- Prevent double "Settings reset" admin notice upon settings reset
- 047:
- Don't save default setting values to database on install
- Change "Cheatin', huh?" error messages to "Something went wrong.", consistent with WP core
- Note compatibility through WP 4.9+
- Drop compatibility with version of WP older than 4.7
- 046:
- Fix
reset_options()
to reference instance variable $options
- Note compatibility through WP 4.7+
- Update copyright date (2017)
- 045:
- Ensure
reset_options()
resets values saved in the database
- 044:
- Add
reset_caches()
to clear caches and memoized data. Use it in reset_options()
and verify_config()
.
- Add
verify_options()
with logic extracted from verify_config()
for initializing default option attributes.
- Add
add_option()
to add a new option to the plugin's configuration.
- Add filter 'sanitized_option_names' to allow modifying the list of whitelisted option names.
- Change: Refactor
get_option_names()
.
- 043:
- Disregard invalid lines supplied as part of hash option value.
- New: Add README.md
- Change: Store setting name in constant
- Change: Make untranslated strings translatable
- Change: Unit tests:
- Add tests for
bp_members_validate_user_signup()
- Improve test initialization
- Improve tests for settings handling
- Default
WP_TESTS_DIR
to /tmp/wordpress-tests-lib
rather than erroring out if not defined via environment variable
- Enable more error output for unit tests
- Change: Minor code reformatting (spacing)
- Change: Add GitHub link to readme
- Change: Note compatibility through WP 4.9+
- Change: Drop compatibility with versions of WP older than 4.7
- Change: Rename readme.txt section from 'Filters' to 'Hooks'
- Change: Modify formatting of hook name in readme to prevent being uppercased when shown in the Plugin Directory
- Change: Update copyright date (2018)
- Change: Update installation instruction to prefer built-in installer over .zip file
3.6 (2016-05-03)
Highlights:
- This release largely consists of minor behind-the-scenes changes.
Details:
- Change: Update plugin framework to 042:
- Change class name to c2c_RestrictUsernames_Plugin_042 to be plugin-specific.
- Set textdomain using a string instead of a variable.
- Don't load textdomain from file.
- Change admin page header from 'h2' to 'h1' tag.
- Add
c2c_plugin_version()
.
- Formatting improvements to inline docs.
- Change: Add support for language packs:
- Set textdomain using a string instead of a variable.
- Remove .pot file and /lang subdirectory.
- Change: Amend description for max_length setting to indicate WP already enforces a max length of 60, which the plugin cannot increase.
- New: Hook 'illegal_user_logins' filter to add in usernames explicitly prohibited by the plugin.
- New: Add special note and FAQ item to readme indicating the likely lack of compatibility with membership plugins that have custom registration handling.
- Change: Declare class as final.
- Change: Explicitly declare methods in unit tests as public or protected.
- Change: Minor code reformatting.
- Change: Minor improvements to inline docs and test docs.
- Change: Prevent web invocation of unit test bootstrap.php.
- New: Add LICENSE file.
- New: Create empty index.php to prevent files from being listed if web server has enabled directory listings.
- Change: Note compatibility through WP 4.5+.
- Change: Remove support for versions of WordPress older than 4.1.
- Change: Update copyright date (2016).
3.5.1 (2015-04-16)
- Bugfix: compatibility fix for versions of WP older than 4.1;
$error->remove()
was introduced in 4.1
3.5 (2015-02-20)
- Fix error message handling to override misleading default WP registration error message
- Update plugin framework to 039
- Add more unit tests
- Explicitly declare
activation()
and uninstall()
static
- Reformat plugin header
- Change documentation links to wp.org to be https
- Minor documentation spacing changes throughout
- Note compatibility through WP 4.1+
- Update copyright date (2015)
- Add plugin icon
- Add Russian translation. props Kolya Korobochkin
- Regenerate .pot
3.4.1 (2014-01-15)
- Bugfix to prevent plugin from causing admin error/notice messages to appear twice
3.4 (2014-01-14)
- Fix to display settings page update messages and username test tool results
- Add setting to optionally enforce minimum length for usernames
- Add setting to optionally enforce maximum length for usernames
- Improve display of username test tool results:
- Display as list
- Color-code results as green or red
- Make 'valid' and 'invalid' translatable
- Add is_buddypress() to determine if BuddyPress's user validation checks are being used
- Move descriptive text from top of settings page into Help panel under new 'About' tab
- Add unit tests
- Update plugin framework to 037
- Better singleton implementation:
- Add
get_instance()
static method for returning/creating singleton instance
- Make static variable 'instance' private
- Make constructor protected
- Make class final
- Additional related changes in plugin framework (protected constructor, erroring
__clone()
and __wakeup()
)
- Add checks to prevent execution of code if file is directly accessed
- Use explicit path for require_once()
- Discontinue use of PHP4-style constructor
- Discontinue use of explicit pass-by-reference for objects
- Minor documentation improvements
- Minor code reformatting (spacing, bracing)
- Note compatibility through WP 3.8+
- Drop compatibility with version of WP older than 3.6
- Update copyright date (2014)
- Regenerate .pot
- Change donate link
- Update screenshot
- Add banner
3.3
- Fix bug with partial username restriction
- Add setting page tool for testing multiple usernames for validity
- Add filter c2c_restrict_usernames-validate to allow adding custom restrictions
- Add contextual help 'Advanced' tab to explain new filter
- Add Filters section to readme
- Use square bracket notation for string character index reference
- Regenerate .pot
- Re-license as GPLv2 or later (from X11)
- Add 'License' and 'License URI' header tags to readme.txt and plugin file
- Note compatibility through WP 3.5+
- Update copyright date (2013)
- Remove ending PHP close tag
- Create repo's WP.org assets directory
- Move screenshot into repo's assets directory
3.2
- Add support for Multisite
- Update plugin framework to 034
- Remove support for 'c2c_restrict_usernames' global
- Note compatibility through WP 3.3+
- Drop compatibility with versions of WP older than 3.1
- Change parent constructor invocation
- Create 'lang' subdirectory and move .pot file into it
- Regenerate .pot
- Add 'Domain Path' directive to top of main plugin file
- Add link to plugin directory page to readme.txt
- Tweak installation instructions in readme.txt
- Update screenshots for WP 3.3
- Update copyright date (2012)
3.1
- Add support for BuddyPress
- Add bp_members_validate_user_signup()
- Fix to properly register activation and uninstall hooks
- Update plugin framework to 023
- Save a static version of itself in class variable $instance
- Deprecate use of global variable $c2c_restrict_usernames to store instance
- Add __construct(), activation()
- Note deprecation of 'c2c_restrict_usernames' global
- Note compatibility through WP 3.2+
- Drop support for versions of WP older than 3.0
- Add more FAQ questions
- Minor code formatting changes (spacing)
- Fix plugin homepage and author links in description in readme.txt
3.0.1
- Update plugin framework to version 021
- Explicitly declare all class functions public
- Delete plugin options upon uninstallation
- Note compatibility through WP 3.1+
- Update copyright date (2011)
3.0
- Re-implementation by extending C2C_Plugin_016, which among other things adds support for:
- Reset of options to default values
- Better sanitization of input values
- Offload of core/basic functionality to generic plugin framework
- Additional hooks for various stages/places of plugin operation
- Easier localization support
- Full localization support
- Fix to display custom error message rather than the incorrect WordPress default validation error message
- Store plugin instance in global variable, $c2c_restrict_usernames, to allow for external manipulation
- Rename class from 'RestrictUsernames' to 'c2c_RestrictUsernames'
- Remove docs from top of plugin file (all that and more are in readme.txt)
- Note compatibility with WP 2.9+, 3.0+
- Drop compatibility with versions of WP older than 2.8
- Add PHPDoc documentation
- Minor tweaks to code formatting (spacing)
- Add Upgrade Notice section to readme.txt
- Remove trailing whitespace
- Update screenshot
- Update .pot file
2.0.1
- Fix to add accidentally omitted get_option_names()
2.0
- Add option to disallow use of spaces in usernames
- Add option to allow requirement of any of numerous substrings as part of usernames (including start with and end with requirements)
- Add reset button to reset options
- Move initialization of config array out of constructor and into new function load_config()
- Create init() to handle calling load_textdomain() and load_config() (textdomain must be loaded before initializing config)
- Return immediately if username being check is already invalid
- Use strpos() instead of stristr()
- Changed invocation of plugin's install function to action hooked in constructor rather than in global space
- Extract settings saving code into maybe_save_options()
- Extract settings display code into display_option()
- Update object's option buffer after saving changed submitted by user
- Add support for localization
- Add .pot file
- Add PHPDoc documentation
- Note compatibility with WP 2.9+
- Drop compatibility with versions of WP older than 2.8
- Update documentation
- Update copyright date
1.1
- Added 'Settings' link to plugin's plugin listing entry
- Used plugins_url() instead of hardcoded path
- Noted compatibility with WP2.8+
- Minor code formatting tweaks
1.0