[wp-trac] [WordPress Trac] #10396: Pick an username during the install
WordPress Trac
wp-trac at lists.automattic.com
Wed Jul 29 08:15:32 UTC 2009
#10396: Pick an username during the install
-----------------------------+----------------------------------------------
Reporter: dcole07 | Owner: dd32
Type: enhancement | Status: new
Priority: normal | Milestone: 2.9
Component: Upgrade/Install | Version: 2.9
Severity: normal | Keywords: needs-unit-tests
-----------------------------+----------------------------------------------
Comment(by dd32):
> but what if someone deletes all the administrators or gets locked out of
all the administrator accounts some how?
Then re-installing shouldnt be the way they go about it.. Instead, They
should be reseting the users password via the forgotten-password link or
manually inserting a md5 into the users table via phpmyadmin.
> I'll wait for #10201 to be patched and check for any administrator
roles.
That sounds like the best method of attack to me. - Either that.. or add a
if ( user_exists('admin') ) $username = 'admin'; for now with a new
blocker ticket created to move that from check for admin user, to check
for administrator roled users..
--
Ticket URL: <http://core.trac.wordpress.org/ticket/10396#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list