[wp-trac] Re: [WordPress Trac] #5579: XMLRPC Authentication

WordPress Trac wp-trac at lists.automattic.com
Fri Jan 4 16:10:11 GMT 2008


#5579: XMLRPC Authentication
--------------------------+-------------------------------------------------
 Reporter:  PhoenixRises  |        Owner:  anonymous
     Type:  defect        |       Status:  new      
 Priority:  normal        |    Milestone:  2.5      
Component:  XML-RPC       |      Version:           
 Severity:  normal        |   Resolution:           
 Keywords:                |  
--------------------------+-------------------------------------------------
Comment (by brianlayman):

 That's funny... It's my day off so I was actually looking at this too.  I
 have a slightly different take on the issue.

 In my mind, the bug is that this routine WAS actually moved to XMLRPC as
 intended, however it was never actually removed from USER when this
 occured.  And because of the include structure (user.php is required into
 settings.php before pluggable.php is and settings.php is included into
 xmlrpc.php before user_pass_ok is defined), that function cannot be
 overridden.

 I think the correct fix is simply to delete the extra copy of user_pass_ok
 from user.php.  The function's code in xmlrpc.php is identical to what is
 in user.php.  The only change the userbase would see is that those of us
 who plugged that function would suddenly have their new routines called.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/5579#comment:2>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list