[wp-trac] [WordPress Trac] #61136: wp-login.php?action=postpass PHP Warning with invalid input
WordPress Trac
noreply at wordpress.org
Fri May 3 05:16:01 UTC 2024
#61136: wp-login.php?action=postpass PHP Warning with invalid input
------------------------------------+--------------------
Reporter: dd32 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 6.6
Component: Login and Registration | Version:
Severity: minor | Keywords: commit
Focuses: |
------------------------------------+--------------------
The following warning can be generated on wp-login.php:
{{{
E_WARNING: strlen() expects parameter 1 to be string, array given in wp-
includes/class-phpass.php:206
}}}
This can be duplicated with a request such as:
{{{
curl http://example.org/wp-login.php?action=postpass --data
'post_password[foo]=bar'
}}}
Similar to #59373
--
Ticket URL: <https://core.trac.wordpress.org/ticket/61136>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list