[wp-meta] [Making WordPress.org] #4691: Break Password Hash when user is blocked
Making WordPress.org
noreply at wordpress.org
Tue Aug 20 20:31:43 UTC 2019
#4691: Break Password Hash when user is blocked
----------------------------+---------------------
Reporter: Ipstenu | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Support Forums | Resolution:
Keywords: |
----------------------------+---------------------
Comment (by Ipstenu):
> Maybe instead of tying it to blocked, we could give a "Clear Password"
button, so that these two actions are separate?
My only reason I'm against that is making it two steps instead of one
means people will forget. If we can reduce the mistakes, we'll save
everyone a lot of headaches.
> The increase in Trac spam/pentesting hasn’t made me “fix” it though
since they generally switch accounts before you block them anyway.
Generally yes :) But at the same time, they're not the only kind of
recidivist we get :D
--
Ticket URL: <https://meta.trac.wordpress.org/ticket/4691#comment:4>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org
More information about the wp-meta
mailing list