when users sign up on my bp 1.1 site (wpmu 2.9) and they enter a username with a space in it like “joe smith” then the register page doesn’t give them an error and yet it automatically removes that space. the user then gets an automated email with an authentication link but that email doesn’t tell the user what their username is.
If the user selects ‘forgot password’ then the reset email that arrives does have the username.
so my suggestion is to simply return an error if a space is selected.
i tried making a ‘custom.php’ as described above but it made my site disappear, i would love the option of email username and password to a user – i agree that in low security sites it’s better to keep it simple