[wp-trac] [WordPress Trac] #21022: Allow bcrypt to be enabled via filter for pass hashing

WordPress Trac noreply at wordpress.org
Wed Oct 7 23:50:27 UTC 2015


#21022: Allow bcrypt to be enabled via filter for pass hashing
-----------------------------------+------------------------------
 Reporter:  th23                   |       Owner:
     Type:  enhancement            |      Status:  new
 Priority:  normal                 |   Milestone:  Awaiting Review
Component:  Security               |     Version:  3.4
 Severity:  normal                 |  Resolution:
 Keywords:  2nd-opinion has-patch  |     Focuses:
-----------------------------------+------------------------------

Comment (by Otto42):

 I'd be careful about "unlikely". There was a fair amount of complaints
 about the utf8mb4 changes, from people running different versions of mysql
 on test/demo sites vs. production ones.

 In that case, they built sites locally, then transferred them with mysql
 dumps. This would cause the same problem for local sites running 5.5 and
 production running 5.3.

 Still, my view is to simply reset the passwords in such a case, so I'm
 still for this change. Maybe making detection of the case is possible too,
 like was done with the md5 password change originally.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/21022#comment:58>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list