Lock the registration email to the invite only when the invite is redeemable

The register form keyed the read-only, prefilled email off any invite row matching the token. A stale token (expired / accepted / revoked) with open registration on therefore showed the stale invite's address read-only while the submit handler took the open branch and required a posted email the locked field never submits, dead-ending the form. The lock now applies exactly when the invite is acceptable; otherwise the editable field renders. Closes #78 Co-Authored-By: Claude Fable 5 <[email protected]>
2026-07-22 10:24:44 -03:00
parent 05d1728248
commit 681fc5ae07
4 changed files with 54 additions and 5 deletions
@@ -7,6 +7,7 @@ if (! defined('ABSPATH')) {

 /**
 * @var \Unsupervised\Schedular\Auth\Invite|null $invite
+ * @var bool   $inviteValid Whether $invite can still be redeemed — only then is the email fixed.
 * @var string $token Raw invite token from the request (only its hash is stored).
 * @var bool   $canRegister
 * @var bool   $open   Whether open (self-approval) registration is enabled.
@@ -43,7 +44,7 @@ if (! defined('ABSPATH')) {

                <p>
                    <label for="us-reg-email"><?php esc_html_e('Email', 'unsupervised-schedular'); ?></label>
-                    <?php if ($invite !== null) : ?>
+                    <?php if ($inviteValid && $invite !== null) : ?>
                        <input type="email" id="us-reg-email" value="<?php echo esc_attr($invite->email); ?>" readonly>
                    <?php else : ?>
                        <input type="email" name="email" id="us-reg-email" autocomplete="email" required>