Opened 8 years ago

Closed 8 years ago

#1110 closed defect (bug) (fixed)

Admin can add a user with [space] as nick name

Reported by: gzfelix Owned by: ryan
Priority: normal Milestone:
Component: Security Version: 1.5.1
Severity: major Keywords:
Cc:

Description

In the admin panel, Users/Authors & Users, the admin can add a user with [space] as nick name.

Reproduce:

  1. Add a user with [space] as its nick name, fill the email and password fields.
  2. Promote this user.

As a side effect, this user is always logged in, so you cannot comment a post. In the Leave a reply page, it always shows that Logged in as (empty).

Attachments (1)

users.php.diff​ (952 bytes) - added by gzfelix 8 years ago.

Download all attachments as: .zip

Change History (5)

comment:1   gzfelix — 8 years ago

  • Patch set to No

comment:2   MC_incubus — 8 years ago

  • Patch changed from No to Yes
  • Version changed from 1.5 to 1.5.1

comment:3   MC_incubus — 8 years ago

  • Owner changed from anonymous to rboren
  • Status changed from new to assigned

comment:4   ryan — 8 years ago

  • fixed_in_version set to 1.5.1
  • Resolution changed from 10 to 20
  • Status changed from assigned to closed

​http://trac.wordpress.org/changeset/2449

gzfelix — 8 years ago

Note: See TracTickets for help on using tickets.