Ticket #8775: 8775.patch

src/bp-members/bp-members-functions.php

@@ -2559 +2559 @@
 
         $is_site_creation = false;
 
-        $referer = wp_get_referer();
-
         // A new site is being added.
         if ( isset( $_POST['stage'] ) && $_POST['stage'] === 'gimmeanotherblog' ) {
                 $is_site_creation = true;
 
-        // We've arrived at wp-signup.php from my-sites.php.
-        } elseif ( $referer ) {
-                $referer_path     = wp_parse_url( $referer, PHP_URL_PATH );
-                $is_site_creation = false !== strpos( $referer_path, 'wp-admin/my-sites.php' );
+        } else {
+                // The WordPress registration setting must allow access.
+                $registration = get_site_option( 'registration' );
+                if ( is_user_logged_in() && in_array( $registration, [ 'blog', 'all' ] ) ) {
+                        $is_site_creation = true;
+                }
         }
 
         if ( $is_site_creation ) {