[wp-trac] [WordPress Trac] #15486: Auto-generated wp-config.php doesn't have escaping for the MySQL password

WordPress Trac wp-trac at lists.automattic.com
Tue Dec 21 12:49:18 UTC 2010


#15486: Auto-generated wp-config.php doesn't have escaping for the MySQL password
-----------------------------+------------------------------
 Reporter:  SaltwaterC       |       Owner:
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Upgrade/Install  |     Version:  3.0.1
 Severity:  normal           |  Resolution:
 Keywords:  has-patch        |
-----------------------------+------------------------------

Comment (by dd32):

 > I think we should just not let people use that char in there password if
 they are using setup-config.php instead.

 One possible source of such a legit character in the password may come
 from other applications which auto-generate a random password, doing so
 could lead to scenario's in which the user has to change their password in
 order to use setup-config.php

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/15486#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list