[wp-trac] [WordPress Trac] #23494: impossible to log in with password containing leading or trailing spaces

WordPress Trac noreply at wordpress.org
Wed Apr 3 07:23:19 UTC 2013


#23494: impossible to log in with password containing leading or trailing spaces
-------------------------------------+---------------------
 Reporter:  mich1                    |       Owner:  westi
     Type:  defect (bug)             |      Status:  closed
 Priority:  high                     |   Milestone:  3.6
Component:  Users                    |     Version:  2.5
 Severity:  major                    |  Resolution:  fixed
 Keywords:  needs-patch 2nd-opinion  |
-------------------------------------+---------------------

Comment (by westi):

 Replying to [comment:6 nacin]:
 > Should we do both in wp_authenticate()? With and without trim? To
 prevent current bad passwords from not working? Or, since they never
 worked, is this less of an issue?

 "Currently all these users are "locked out" so we don't have to support
 their passwords" was the conclusion I came to.

 The passwords never worked so I decided it was better to not confuse the
 issue by trying to support them.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23494#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list