[wp-trac] [WordPress Trac] #21495: wp_insert_user allows a user to be created with empty passwords

WordPress Trac noreply at wordpress.org
Wed Feb 5 05:55:39 UTC 2014


#21495: wp_insert_user allows a user to be created with empty passwords
-------------------------------------+------------------------------
 Reporter:  ancawonka                |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Users                    |     Version:
 Severity:  minor                    |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+------------------------------

Comment (by knutsp):

 Please don't fix. Programatically creating a user should only require
 technically required parameters/fields. Not all users are expected to log
 in. Sometimes you need to just create a user to get a user id. Giving
 those a password is a secondary task.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/21495#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list