[wp-trac] [WordPress Trac] #54988: Password Protected Page access sequrity issue

WordPress Trac noreply at wordpress.org
Sat Jan 29 16:30:54 UTC 2022


#54988: Password Protected Page access sequrity issue
--------------------------+------------------------------
 Reporter:  ravipatel     |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by tobifjellner):

 * status:  new => closed
 * focuses:  administration, coding-standards =>
 * resolution:   => invalid


Comment:

 This is not an error, but the way this rather simple function was
 designed:
 When a visitor enters a password for a password-protected page, that
 password is stored (in clear text) as a cookie in the visitor's browser.
 So if you use the same password on several pages, then a visitor will have
 to enter this password only once.

 So I'll take the freedom to close this ticket.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54988#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list