[wp-meta] [Making WordPress.org] #4691: Break Password Hash when user is blocked

Making WordPress.org noreply at wordpress.org
Tue Aug 20 20:31:43 UTC 2019


#4691: Break Password Hash when user is blocked
----------------------------+---------------------
 Reporter:  Ipstenu         |       Owner:  (none)
     Type:  enhancement     |      Status:  new
 Priority:  normal          |   Milestone:
Component:  Support Forums  |  Resolution:
 Keywords:                  |
----------------------------+---------------------

Comment (by Ipstenu):

 > Maybe instead of tying it to blocked, we could give a "Clear Password"
 button, so that these two actions are separate?

 My only reason I'm against that is making it two steps instead of one
 means people will forget. If we can reduce the mistakes, we'll save
 everyone a lot of headaches.

 > The increase in Trac spam/pentesting hasn’t made me “fix” it though
 since they generally switch accounts before you block them anyway.

 Generally yes :) But at the same time, they're not the only kind of
 recidivist we get :D

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/4691#comment:4>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org


More information about the wp-meta mailing list