[wp-trac] [WordPress Trac] #35715: edit_user() doesn't check for empty password (pass1).

[WordPress Trac]

#35715: edit_user() doesn't check for empty password (pass1).
-------------------------------------------------+-------------------------
 Reporter:  gitlost                              |       Owner:  ocean90
     Type:  defect (bug)                         |      Status:  accepted
 Priority:  normal                               |   Milestone:  4.5
Component:  Users                                |     Version:  4.4
 Severity:  normal                               |  Resolution:
 Keywords:  good-first-bug has-patch has-        |     Focuses:
  screenshots                                    |
-------------------------------------------------+-------------------------

Comment (by ocean90):

 Replying to [comment:12 adamsilverstein]:
 > I also verified I can create a user with the password `0` and `000`,
 both worked fine.

 You can't login with 0 as a password, also edit_user() won't store it
 because it has an `empty()` check. Because of this we don't need the
 special `strlen()` check, `empty()` would be fine.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35715#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform