[wp-trac] [WordPress Trac] #35500: Login page: user can change password on " " but can't log in with new password.

[WordPress Trac]

#35500: Login page: user can change password on " " but can't log in with new
password.
-------------------------------------------------+-------------------------
 Reporter:  antonrinas                           |       Owner:
                                                 |  hellofromTonya
     Type:  defect (bug)                         |      Status:  assigned
 Priority:  lowest                               |   Milestone:  5.9
Component:  Login and Registration               |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch needs-testing has-         |     Focuses:
  testing-info                                   |
-------------------------------------------------+-------------------------
Changes (by hellofromTonya):

 * keywords:  needs-patch => has-patch needs-testing has-testing-info
 * milestone:   => 5.9


Comment:

 == Testing info

 === Dependencies

 Need a way to capture the password reset email when testing locally. One
 way is to install and activate the Email Log plugin. This plugin captures
 email notifications, including the password reset email.

 === How to get a password reset link and display the Password Reset
 screen:

 1. Request to reset your password by (a) going to the login page, (b)
 clicking on "Lost your password?" link, and then adding your username or
 email.
 2. Get the password reset link from the email by:
     - Open the database. If using Local, click on the `Database` tab and
 then click on `Open Adminer`. It should then open in your browser.
     - Open the `wp_email_log` database table.
     - Click on `Select data`.
     - Edit the last record in the table, which opens it up.
     - Copy the link in the `message` field (likely will need to scroll
 down to view and then copy it).
 3. Open a different browser and turn off/disable JavaScript.
 4. Copy the reset password link into that browser.

 === How to reproduce the problem locally
 1. Go to the Password Reset screen (see above).
 2. Type one or more spaces into both password fields.
 3. Click `Save Password` button. => Notice it let you.
 4. Try to log in with that "space-only" password. => Notice it fails.

 === How to test the patch
 1. Request another password reset and go to the Password Reset screen (see
 above).
 2. Type one or more spaces into both password fields.
 3. Click `Save Password` button.

 This time notice an error message is displayed and the Password Reset
 screen reloads.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/35500#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform