[wp-trac] [WordPress Trac] #49392: wp_check_password is broken and give result false if there is ampersand (&) character on password
WordPress Trac
noreply at wordpress.org
Tue Feb 18 14:54:59 UTC 2020
#49392: wp_check_password is broken and give result false if there is ampersand (&)
character on password
-------------------------------+------------------------------
Reporter: nariyanto | Owner: (none)
Type: defect (bug) | Status: closed
Priority: normal | Milestone: Awaiting Review
Component: Users | Version: 5.3.2
Severity: normal | Resolution: invalid
Keywords: reporter-feedback | Focuses:
-------------------------------+------------------------------
Comment (by JaworskiMatt):
If someone runs into a similar problem while developing a plugin. Our
issue was because of the default escaping of `$_POST` arguments - we
needed an exception made for the password, so we could hash it properly.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/49392#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list