unable to login when username/email mismatch

We are using the login form and have it configured to allow login using either username or email.

We’ve found that if an account has an email address for the username but a different email for the account email, the user is not able to login. When logging in, the user receives the message “a user could not be found with this email address”.

I took a quick glance at the code and believe this is because you are passing the submitted value through the function is_email() to determine if it’s an email and then looking up the user by email address (functions-ur-core.php). In this case, the username value is formatted as an email but needs to be looked up by username, not email — given the mismatch.

While the mismatch might be less than ideal, I’m sure it’s not that unusual. We lock the username field so that it cannot be edited, but the email address can be. If the user signs up with one email as both the email and username, and then later changes their email address, the username will remain as originally set.

I think you need to restructure the logic so that the submitted value is consistently checked against both the username and email fields, regardless of it’s format.