[wp-trac] [WordPress Trac] #35500: Login page: user can change password on " " but can't log in with new password.

WordPress Trac noreply at wordpress.org
Tue Jan 19 12:13:22 UTC 2016


#35500: Login page: user can change password on " " but can't log in with new
password.
------------------------------------+------------------------------
 Reporter:  antonrinas              |       Owner:
     Type:  defect (bug)            |      Status:  new
 Priority:  lowest                  |   Milestone:  Awaiting Review
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:
 Keywords:  needs-patch             |     Focuses:
------------------------------------+------------------------------

Comment (by swissspidy):

 Simply not using `trim()` on the password in `wp_authenticate()` results
 in a `incorrect_password` error instead of `empty_password`. So that's
 only half of the deal.

 I consider using `trim()` very helpful, e.g. when users accidentally hit
 space when typing in their password. Since someone rarely if ever changes
 their password to ` `, I think the downsides outweigh the benefits.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35500#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list