Ticket #1110 (closed defect (bug): fixed)

Opened 7 years ago

Last modified 7 years ago

Admin can add a user with [space] as nick name

Reported by: gzfelix Owned by: ryan
Priority: normal Milestone:
Component: Security Version: 1.5.1
Severity: major Keywords:
Cc:

Description

In the admin panel, Users/Authors & Users, the admin can add a user with [space] as nick name.

Reproduce:

  1. Add a user with [space] as its nick name, fill the email and password fields.
  2. Promote this user.

As a side effect, this user is always logged in, so you cannot comment a post. In the Leave a reply page, it always shows that Logged in as (empty).

Attachments

users.php.diff Download (952 bytes) - added by gzfelix 7 years ago.

Change History

comment:1   gzfelix — 7 years ago

  • Patch set to No

comment:2   MC_incubus — 7 years ago

  • Version changed from 1.5 to 1.5.1
  • Patch changed from No to Yes

comment:3   MC_incubus — 7 years ago

  • Owner changed from anonymous to rboren
  • Status changed from new to assigned

comment:4   ryan — 7 years ago

  • Status changed from assigned to closed
  • fixed_in_version set to 1.5.1
  • Resolution changed from 10 to 20

 http://trac.wordpress.org/changeset/2449

gzfelix — 7 years ago

Note: See TracTickets for help on using tickets.