[wp-trac] [WordPress Trac] #3534: Hide password in setup-config.php

WordPress Trac noreply at wordpress.org
Mon Jul 13 05:58:56 UTC 2020


#3534: Hide password in setup-config.php
-------------------------------------------------+-------------------------
 Reporter:  xmarcos                              |       Owner:  rob1n
     Type:  enhancement                          |      Status:  reopened
 Priority:  low                                  |   Milestone:  Awaiting
                                                 |  Review
Component:  Upgrade/Install                      |     Version:  2.1
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch needs-unit-tests needs-    |     Focuses:
  testing needs-refresh                          |
-------------------------------------------------+-------------------------
Changes (by markparnell):

 * keywords:  has-patch needs-unit-tests needs-testing => has-patch needs-
     unit-tests needs-testing needs-refresh
 * component:  General => Upgrade/Install
 * severity:  minor => normal


Comment:

 I'd love to see this resolved - entering passwords in plain-text should be
 considered a security issue. Using the same interface that is used
 elsewhere (a password-type field with a toggle to view the entered text
 should the user choose to do so) makes the most sense to me. I wasn't able
 to get the existing patch to apply to trunk though, so marking for
 refresh.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/3534#comment:38>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list