When pubcookie is enabled, Drupal's core user/login gets broken. (This is only an issue if you need to use pubcookie concurrent with drupal's core user/login.)

The pubcookie_user_presave() function sets the user.module's $account->mail value to '@'
Users can still create accounts, but user.module sets the new user's mail value to '@' or '' as a result.

As a workaround you can get pubcookie_user_presave to check that it's the module handling the login by changing:
if ($account->is_new) {
to
if ($account->is_new && preg_match( '/login\/pc/' , $_ENV['REQUEST_URI'] ) ) {

Not sure what glaring security implications this workaround creates.

Comments

jvandyk’s picture

jvandyk commented
Assigned: Unassigned » jvandyk

Nice catch. Will fix.

jvandyk’s picture

jvandyk commented
Status: Active » Fixed

Fixed in 7.x-1.0. Rather than taking the approach above, we now check if the $_pubcookie_user is set; if not, account creation is being handled by another module.

druliner’s picture

druliner commented

Tested in on our development and production multi-site environments and it works like a champ.
Thanks for the quick turn-around.
Dan

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.