[wp-trac] [WordPress Trac] #61136: wp-login.php?action=postpass PHP Warning with invalid input

WordPress Trac noreply at wordpress.org
Fri May 3 05:16:01 UTC 2024


#61136: wp-login.php?action=postpass PHP Warning with invalid input
------------------------------------+--------------------
 Reporter:  dd32                    |      Owner:  (none)
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  6.6
Component:  Login and Registration  |    Version:
 Severity:  minor                   |   Keywords:  commit
  Focuses:                          |
------------------------------------+--------------------
 The following warning can be generated on wp-login.php:
 {{{
 E_WARNING: strlen() expects parameter 1 to be string, array given in wp-
 includes/class-phpass.php:206
 }}}

 This can be duplicated with a request such as:
 {{{
 curl http://example.org/wp-login.php?action=postpass --data
 'post_password[foo]=bar'
 }}}

 Similar to #59373

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61136>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list