Lock the registration email to the invite only when the invite is redeemable #82

Merged

thatguygriff merged 1 commits from fix/invite-email-lock into main

2026-07-22 13:31:17 +00:00

Author	SHA1	Message	Date
thatguygriffandClaude Fable 5	681fc5ae07	Lock the registration email to the invite only when the invite is redeemable CI / Tests (PHP 8.1) (pull_request) Successful in 43s Details CI / Tests (PHP 8.2) (pull_request) Successful in 37s Details CI / PHPStan (pull_request) Successful in 2m45s Details CI / Build Plugin Zip (pull_request) Skipped Details CI / No Debug Code (pull_request) Successful in 2s Details CI / Coding Standards (pull_request) Successful in 2m49s Details CI / Tests (PHP 8.3) (pull_request) Successful in 2m42s Details The register form keyed the read-only, prefilled email off any invite row matching the token. A stale token (expired / accepted / revoked) with open registration on therefore showed the stale invite's address read-only while the submit handler took the open branch and required a posted email the locked field never submits, dead-ending the form. The lock now applies exactly when the invite is acceptable; otherwise the editable field renders. Closes #78 Co-Authored-By: Claude Fable 5 <[email protected]>	2026-07-22 10:24:44 -03:00