[wp-trac] [WordPress Trac] #27740: Passwords consisting of spaces are valid at install time

WordPress Trac noreply at wordpress.org
Wed Apr 9 19:27:18 UTC 2014


#27740: Passwords consisting of spaces are valid at install time
--------------------------+-----------------------------
 Reporter:  nfreader      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  3.8.2
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Steps to reproduce:

 1. Install a fresh copy of Wordpress (after initial database information
 page)
 2. Fill out the relevant fields (username, email, site title)
 3. On the password fields, press the spacebar once (so your password is
 one space)
 4. Submit

 The install completes and prompts you to log in, using your single-space
 password

 The login page returns an error:
 Error: The password field is empty.
 ..rendering login impossible

 I believe this is similar to #24973. Preferably there would be a check
 during install to see if the password consists of just spaces (or other
 characters that would be stripped).

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27740>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list