[wp-trac] [WordPress Trac] #43478: Remove password protected post functionality, or make it possible to be disabled

[WordPress Trac]

#43478: Remove password protected post functionality, or make it possible to be
disabled
--------------------------+------------------------------
 Reporter:  tomdxw        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Security      |     Version:  4.9.4
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by danieltj):

 I somewhat agree with one of the suggestions here. Due to how
 authentication works within Core, I agree that a flag to disable this on a
 per site basis seems like a sensible way to go. I will note though that
 the password in plain text part of this doesn't seem like too much of an
 issue to me personally because if you're writing a post, it is somewhat
 public anyway.

 Long story, short; yeah let's get this behind a flag so it can be turned
 off if you wish but not through a theme support function as themes
 shouldn't be removing functionality at all. `wp-config` or via a plugin is
 the best way for backwards compatibility.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43478#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform