[wp-trac] Re: [WordPress Trac] #10253: Use https for wp-pass.php if SSL login configured

WordPress Trac wp-trac at lists.automattic.com
Tue Jun 23 23:00:09 GMT 2009


#10253: Use https for wp-pass.php if SSL login configured
--------------------------+-------------------------------------------------
 Reporter:  ryan          |       Owner:  ryan     
     Type:  defect (bug)  |      Status:  new      
 Priority:  normal        |   Milestone:  2.9      
Component:  Security      |     Version:  2.8      
 Severity:  normal        |    Keywords:  https ssl
--------------------------+-------------------------------------------------

Comment(by Denis-de-Bernardy):

 while we're on the same topic, this, in wp-pass.php, seems like garbage:

 {{{
 if ( get_magic_quotes_gpc() )
         $_POST['post_password'] = stripslashes($_POST['post_password']);
 }}}

 should be:

 {{{
 $_POST['post_password'] = stripslashes($_POST['post_password']);
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10253#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list