[wp-trac] [WordPress Trac] #25536: Salt + Password for HASH generation

WordPress Trac noreply at wordpress.org
Tue Oct 8 14:23:21 UTC 2013


#25536: Salt + Password for HASH generation
------------------------------+----------------------
 Reporter:  transferindo.com  |       Owner:
     Type:  feature request   |      Status:  closed
 Priority:  normal            |   Milestone:
Component:  Security          |     Version:  3.6.1
 Severity:  normal            |  Resolution:  invalid
 Keywords:                    |
------------------------------+----------------------
Changes (by bpetty):

 * keywords:  needs-patch dev-feedback =>
 * status:  new => closed
 * resolution:   => invalid
 * severity:  major => normal
 * milestone:  Awaiting Review =>


Comment:

 WordPress already uses per-password-salts through the use of phpass. Using
 any of the random keys in wp-config would actually be less secure.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25536#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list