[wp-trac] Re: [WordPress Trac] #5579: XMLRPC Authentication
WordPress Trac
wp-trac at lists.automattic.com
Fri Jan 4 16:10:11 GMT 2008
#5579: XMLRPC Authentication
--------------------------+-------------------------------------------------
Reporter: PhoenixRises | Owner: anonymous
Type: defect | Status: new
Priority: normal | Milestone: 2.5
Component: XML-RPC | Version:
Severity: normal | Resolution:
Keywords: |
--------------------------+-------------------------------------------------
Comment (by brianlayman):
That's funny... It's my day off so I was actually looking at this too. I
have a slightly different take on the issue.
In my mind, the bug is that this routine WAS actually moved to XMLRPC as
intended, however it was never actually removed from USER when this
occured. And because of the include structure (user.php is required into
settings.php before pluggable.php is and settings.php is included into
xmlrpc.php before user_pass_ok is defined), that function cannot be
overridden.
I think the correct fix is simply to delete the extra copy of user_pass_ok
from user.php. The function's code in xmlrpc.php is identical to what is
in user.php. The only change the userbase would see is that those of us
who plugged that function would suddenly have their new routines called.
--
Ticket URL: <http://trac.wordpress.org/ticket/5579#comment:2>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list