[wp-trac] [WordPress Trac] #49392: wp_check_password is broken and give result false if there is ampersand (&) character on password

WordPress Trac noreply at wordpress.org
Tue Feb 11 16:32:20 UTC 2020


#49392: wp_check_password is broken and give result false if there is ampersand (&)
character on password
-------------------------------+------------------------------
 Reporter:  nariyanto          |       Owner:  (none)
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Users              |     Version:  5.3.2
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------
Changes (by bookdude13):

 * keywords:   => reporter-feedback


Comment:

 @nariyanto Thanks for the ticket!

 I am unable to reproduce this when changing a different user's password,
 changing my own, or doing a password reset for me. I am able to set it to
 your provided password and login with it just fine.

 How were you testing when you saw this behavior? Was this a unit test or
 something similar?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49392#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list