[wp-trac] [WordPress Trac] #23494: impossible to log in with password containing leading or trailing spaces

[WordPress Trac]

#23494: impossible to log in with password containing leading or trailing spaces
--------------------------+------------------------------
 Reporter:  mich1         |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  3.5.1
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------------------
Description changed by ocean90:

Old description:

> It is possible to set the password to something containing trailing or
> leading space characters (e.g. a single space), but the login dialog
> trims trailing or leading whitespaces. This makes it impossible to log in
> again.
>
> It seems to me that the behavior of the login dialog is intended (see
> [http://core.trac.wordpress.org/ticket/15439]), thus passwords with
> leading or trailing spaces should not be allowed.
>
> Steps to reproduce (best with a new user account):
> - log in
> - change your password to something with leading or trailing spaces
> - log out
> - try to log in again. If you set your password to spaces only you will
> get the same error message as if you entered no password, otherwise you
> will get the message that the password you entered was wrong.
>
> Note: When trying to create a user with leading or trailing spaces that
> differs only by those spaces from an existing user name there is an error
> message that the user name already exists, which is not totally correct.
> It still might be helpful though.

New description:

 It is possible to set the password to something containing trailing or
 leading space characters (e.g. a single space), but the login dialog trims
 trailing or leading whitespaces. This makes it impossible to log in again.

 It seems to me that the behavior of the login dialog is intended (see
 #15439), thus passwords with leading or trailing spaces should not be
 allowed.

 Steps to reproduce (best with a new user account):
 - log in
 - change your password to something with leading or trailing spaces
 - log out
 - try to log in again. If you set your password to spaces only you will
 get the same error message as if you entered no password, otherwise you
 will get the message that the password you entered was wrong.

 Note: When trying to create a user with leading or trailing spaces that
 differs only by those spaces from an existing user name there is an error
 message that the user name already exists, which is not totally correct.
 It still might be helpful though.

--

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23494#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software