[wp-trac] [WordPress Trac] #44887: Add an error on installation if the security keys are not secure

WordPress Trac noreply at wordpress.org
Tue Sep 4 08:14:18 UTC 2018


#44887: Add an error on installation if the security keys are not secure
-------------------------------------+------------------------------
 Reporter:  nnikolov                 |       Owner:  (none)
     Type:  enhancement              |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Security                 |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  close reporter-feedback  |     Focuses:
-------------------------------------+------------------------------
Changes (by SergeyBiryukov):

 * keywords:   => close reporter-feedback


Comment:

 Hi @nnikolov, welcome to WordPress Trac! Thanks for the ticket.

 Unless I'm missing something, a better alternative is already implemented
 in [19771] for #19599.

 If the security keys are not changed, `wp_salt()` creates auto-generated
 keys and saves them in the database to use instead of the ones from `wp-
 config.php`. So I don't think showing an error on installation is
 necessary here.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44887#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list