[wp-trac] Re: [WordPress Trac] #6842: Password reset links produce invalid keys

WordPress Trac wp-trac at lists.automattic.com
Tue May 6 23:26:10 GMT 2008


#6842: Password reset links produce invalid keys
------------------------+---------------------------------------------------
 Reporter:  MtDewVirus  |        Owner:  anonymous
     Type:  defect      |       Status:  reopened 
 Priority:  normal      |    Milestone:  2.5.2    
Component:  Security    |      Version:  2.5.1    
 Severity:  normal      |   Resolution:           
 Keywords:              |  
------------------------+---------------------------------------------------
Comment (by jimmysoho):

 Just get rid of the "special chars" in wp_generate_password, they should
 never be part of any password key. As the original description of this
 ticket explains, it leads to URL links that aren't valid URLs. Another
 solution would be to URL decode the key before sending it out, but that
 leads to other problems as you may imagine.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/6842#comment:9>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list