Hello,
yes, the username and email will always be unique, since the whole functionality is built on the one of WordPress.
Regards,
Gabriel
This does not seem to guarantee that the names displayed in WordPress for different users will be unique. Yes, I agree that WP enforces unique usernames and emails.
The issue is in allowing the “Display name publicly as” option to be displayed in your profile editor.
Unless you enforce that only user_login is displayed, you aren’t guaranteed that you won’t have malicious users trying to masquerade as “admin” or another user’s handle.
“Display name publicly as” seems to allow users to choose between their login name, their first name and their nickname.
Obviously you don’t want to enforce unique first names when registering users.
There does not seem to be any check for uniqueness when setting nicknames.
If nicknames were guaranteed to be unique and first names were removed as an option for the display name, then the problem would be solved.
