[wp-trac] [WordPress Trac] #6849: New password chars !@#$%^&*() are stripped out in wp-login.php

WordPress Trac wp-trac at lists.automattic.com
Sat Apr 26 08:37:40 GMT 2008


#6849: New password chars !@#$%^&*() are stripped out in wp-login.php
----------------------+-----------------------------------------------------
 Reporter:  crosescu  |       Owner:  anonymous
     Type:  defect    |      Status:  new      
 Priority:  high      |   Milestone:  2.5.2    
Component:  General   |     Version:  2.5.1    
 Severity:  major     |    Keywords:           
----------------------+-----------------------------------------------------
 The new chars !@#$%^&*() included in WP 2.5.1 in function
 wp_generate_password() are being stripped out by function reset_password()
 by this $key = preg_replace('/[^a-z0-9]/i', '', $key); and as a result it
 gives an invalid key message when user tries to reset the password.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/6849>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list