[wp-trac] [WordPress Trac] #49392: wp_check_password is broken and give result false if there is ampersand (&) character on password

WordPress Trac noreply at wordpress.org
Tue Feb 18 14:54:59 UTC 2020


#49392: wp_check_password is broken and give result false if there is ampersand (&)
character on password
-------------------------------+------------------------------
 Reporter:  nariyanto          |       Owner:  (none)
     Type:  defect (bug)       |      Status:  closed
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Users              |     Version:  5.3.2
 Severity:  normal             |  Resolution:  invalid
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------

Comment (by JaworskiMatt):

 If someone runs into a similar problem while developing a plugin. Our
 issue was because of the default escaping of `$_POST` arguments - we
 needed an exception made for the password, so we could hash it properly.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49392#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list