[wp-trac] [WordPress Trac] #21495: wp_insert_user allows a user to be created with empty passwords

WordPress Trac noreply at wordpress.org
Thu Oct 3 16:45:26 UTC 2013


#21495: wp_insert_user allows a user to be created with empty passwords
-------------------------------------+------------------------------
 Reporter:  ancawonka                |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Users                    |     Version:
 Severity:  minor                    |  Resolution:
 Keywords:  has-patch needs-testing  |
-------------------------------------+------------------------------
Changes (by nacin):

 * milestone:  3.7 => Awaiting Review


Comment:

 I'm not sure creating a user with an empty password is a problem. What's
 the issue? Surely there are use cases where you don't want a user to log
 in. Or maybe you want them to do a reset in order to get started.

 I have a feeling this could break importers and related scripts.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/21495#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list