[wp-trac] [WordPress Trac] #24633: Allow admins to generate and send new passwords for users

WordPress Trac noreply at wordpress.org
Wed Sep 4 20:40:06 UTC 2013


#24633: Allow admins to generate and send new passwords for users
----------------------------+------------------
 Reporter:  mordauk         |       Owner:
     Type:  task (blessed)  |      Status:  new
 Priority:  normal          |   Milestone:  3.7
Component:  Users           |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------

Comment (by adamsilverstein):

 This is a great addition!

 Also seems like this would be a useful addition to the password reset
 screen, as suggested in [https://irclogs.wordpress.org/chanlog.php?channel
 =wordpress-dev&day=2013-09-04&sort=asc#m681675 IRC]. In that case the
 password would need to be visible so the user can record it since it won't
 be emailed.

 This probably deserves a separate ticket: Plaintext email is inherently
 insecure, so when passwords *are* emailed, we should force users to reset
 their password on the next login.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24633#comment:15>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list