[wp-trac] [WordPress Trac] #21022: Allow bcrypt to be enabled via filter for pass hashing

WordPress Trac wp-trac at lists.automattic.com
Wed Jun 20 15:03:43 UTC 2012


#21022: Allow bcrypt to be enabled via filter for pass hashing
--------------------------+------------------------------
 Reporter:  th23          |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Security      |     Version:  3.4
 Severity:  normal        |  Resolution:
 Keywords:  dev-feedback  |
--------------------------+------------------------------

Comment (by nacin):

 As much as I hate pluggable functions, this is ''precisely'' what they're
 good for. I'd rather see a plugin override both methods than a filter or a
 constant. (Have you seen http://codex.wordpress.org/Editing_wp-config.php?
 Let's not add something to that page that could seriously screw up your
 install.)

 Also, for what it's worth, a plugin can simply do `$wp_hasher = new
 PasswordHash(8, false);` before WordPress does. No need for plugging, or
 hooking, or defining.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21022#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list