[wp-trac] [WordPress Trac] #10396: Pick an username during the install

WordPress Trac wp-trac at lists.automattic.com
Wed Jul 29 08:15:32 UTC 2009


#10396: Pick an username during the install
-----------------------------+----------------------------------------------
 Reporter:  dcole07          |       Owner:  dd32            
     Type:  enhancement      |      Status:  new             
 Priority:  normal           |   Milestone:  2.9             
Component:  Upgrade/Install  |     Version:  2.9             
 Severity:  normal           |    Keywords:  needs-unit-tests
-----------------------------+----------------------------------------------

Comment(by dd32):

 > but what if someone deletes all the administrators or gets locked out of
 all the administrator accounts some how?

 Then re-installing shouldnt be the way they go about it.. Instead, They
 should be reseting the users password via the forgotten-password link or
 manually inserting a md5 into the users table via phpmyadmin.

 > I'll wait for #10201 to be patched and check for any administrator
 roles.
 That sounds like the best method of attack to me. - Either that.. or add a
 if ( user_exists('admin') ) $username = 'admin'; for now with a new
 blocker ticket created to move that from check for admin user, to check
 for administrator roled users..

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10396#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list