[wp-trac] [WordPress Trac] #3917: wp-login.php change to allow web SSO tools to work

WordPress Trac wp-trac at lists.automattic.com
Tue Mar 6 14:45:28 GMT 2007


#3917: wp-login.php change to allow web SSO tools to work
----------------------+-----------------------------------------------------
 Reporter:  anhill    |       Owner:  anonymous
     Type:  defect    |      Status:  new      
 Priority:  low       |   Milestone:  2.3      
Component:  Security  |     Version:  2.1.2    
 Severity:  normal    |    Keywords:           
----------------------+-----------------------------------------------------
 Due to a limitation in JavaScript, web single sign-on tools (in this case
 Novell Access Manager) are unable to do a form-fill SSO authentication to
 WordPress.  The reason is that several of the form elements are named and
 ID'd "submit".  JavaScript gets confused, and won't execute the form fill
 code, which includes a "document.forms[0].submit()" function to enable the
 transparent login.

 This patch is very simple - it changes name="submit" to name="wp-submit"
 and id="submit" to id="wp-submit" in wp-login.php.

 Hopefully I made the problem clear - feel free to let me know if there are
 any questions!

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3917>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list