[wp-meta] [Making WordPress.org] #4691: Break Password Hash when user is blocked

Making WordPress.org noreply at wordpress.org
Tue Aug 20 04:43:15 UTC 2019


#4691: Break Password Hash when user is blocked
----------------------------+---------------------
 Reporter:  Ipstenu         |       Owner:  (none)
     Type:  enhancement     |      Status:  new
 Priority:  normal          |   Milestone:
Component:  Support Forums  |  Resolution:
 Keywords:                  |
----------------------------+---------------------

Comment (by dd32):

 Copying my comment from slack to here:

 > FWIW this has been something that’s been on my radar for awhile.
 >
 > The increase in Trac spam/pentesting hasn’t made me “fix” it though
 since they generally switch accounts before you block them anyway. As soon
 as you delete the ticket, they generally switch to a new account anyway.
 >
 > If you change their password we sent out a “password changed” email too
 AFAIK, which is annoying..

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/4691#comment:3>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list