[wp-trac] Re: [WordPress Trac] #6842: Password reset links produce
invalid keys
WordPress Trac
wp-trac at lists.automattic.com
Tue May 6 23:26:10 GMT 2008
#6842: Password reset links produce invalid keys
------------------------+---------------------------------------------------
Reporter: MtDewVirus | Owner: anonymous
Type: defect | Status: reopened
Priority: normal | Milestone: 2.5.2
Component: Security | Version: 2.5.1
Severity: normal | Resolution:
Keywords: |
------------------------+---------------------------------------------------
Comment (by jimmysoho):
Just get rid of the "special chars" in wp_generate_password, they should
never be part of any password key. As the original description of this
ticket explains, it leads to URL links that aren't valid URLs. Another
solution would be to URL decode the key before sending it out, but that
leads to other problems as you may imagine.
--
Ticket URL: <http://trac.wordpress.org/ticket/6842#comment:9>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list