[wp-trac] [WordPress Trac] #35500: Login page: user can change password on " " but can't log in with new password.
WordPress Trac
noreply at wordpress.org
Tue Jan 19 12:13:22 UTC 2016
#35500: Login page: user can change password on " " but can't log in with new
password.
------------------------------------+------------------------------
Reporter: antonrinas | Owner:
Type: defect (bug) | Status: new
Priority: lowest | Milestone: Awaiting Review
Component: Login and Registration | Version:
Severity: normal | Resolution:
Keywords: needs-patch | Focuses:
------------------------------------+------------------------------
Comment (by swissspidy):
Simply not using `trim()` on the password in `wp_authenticate()` results
in a `incorrect_password` error instead of `empty_password`. So that's
only half of the deal.
I consider using `trim()` very helpful, e.g. when users accidentally hit
space when typing in their password. Since someone rarely if ever changes
their password to ` `, I think the downsides outweigh the benefits.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/35500#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list