Personal invite link: email field must be prefilled and unchangeable #78

New Issue

2026-07-22T12:52:21Z

thatguygriff commented

2026-07-22 12:52:21 +00:00

From the 2026-07-22 user demo.

When someone registers from a personal invite link, the email field should be populated with the invited address and not editable.

Current behaviour

templates/frontend/register-page.php does render a readonly, prefilled email whenever an invite row matches the token — but it keys off $invite !== null, not off the invite actually being redeemable. With open registration enabled, an expired / accepted / revoked invite token still shows its stale email readonly, while the submit handler takes the open-registration branch and reads $_POST['email'] — which the readonly field never submits (it has no name), so the form dead-ends with "Please enter a valid email address."

Wanted

Valid pending invite → email prefilled from the invite and locked (server side keeps using the invite's email as the source of truth, ignoring any client-tampered value).
Invite that is no longer acceptable + open registration on → normal editable email field.
Test coverage for the locked-email rendering and both fallback paths.

**From the 2026-07-22 user demo.** When someone registers from a **personal** invite link, the email field should be populated with the invited address and not editable. ## Current behaviour `templates/frontend/register-page.php` does render a readonly, prefilled email whenever an invite row matches the token — but it keys off `$invite !== null`, not off the invite actually being redeemable. With open registration enabled, an **expired / accepted / revoked** invite token still shows its stale email readonly, while the submit handler takes the open-registration branch and reads `$_POST['email']` — which the readonly field never submits (it has no `name`), so the form dead-ends with "Please enter a valid email address." ## Wanted - Valid pending invite → email prefilled from the invite and locked (server side keeps using the invite's email as the source of truth, ignoring any client-tampered value). - Invite that is no longer acceptable + open registration on → normal editable email field. - Test coverage for the locked-email rendering and both fallback paths.

thatguygriff added the bug label 2026-07-22 12:52:21 +00:00

thatguygriff referenced this issue from a commit

2026-07-22 13:24:47 +00:00

Lock the registration email to the invite only when the invite is redeemable

thatguygriff referenced a pull request that will close this issue

2026-07-22 13:25:19 +00:00

Lock the registration email to the invite only when the invite is redeemable #82

thatguygriff closed this issue

2026-07-22 13:31:17 +00:00

thatguygriff referenced this issue

2026-07-22 13:45:08 +00:00

Add multi-use group invite links with expiry and auto-approval on email confirmation #83