[wp-trac] Re: [WordPress Trac] #2394: Passwords are stored in an insecure un-salted form

WordPress Trac wp-trac at lists.automattic.com
Thu Nov 22 21:46:07 GMT 2007


#2394: Passwords are stored in an insecure un-salted form
-------------------------------------------+--------------------------------
 Reporter:  sjmurdoch                      |        Owner:  pishmishy
     Type:  defect                         |       Status:  assigned 
 Priority:  normal                         |    Milestone:  2.4      
Component:  Security                       |      Version:  2.0      
 Severity:  normal                         |   Resolution:           
 Keywords:  needs-patch salt password md5  |  
-------------------------------------------+--------------------------------
Changes (by westi):

  * keywords:  has-patch salt password md5 => needs-patch salt password md5

Comment:

 Replying to [comment:17 ryan]:
 > phpass seems flexible and portable and has a compatible license.  Why
 not use it?  I'd rather not reinvent what someone more knowledgeable in
 the field has already done.

 Agreed.  Marking as needs-patch

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2394#comment:18>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list