Ticket #14949: 14949-signon-internals.patch

wp-includes/user.php

@@ -24 +24 @@
  */
 function wp_signon( $credentials = '', $secure_cookie = '' ) {
         if ( empty($credentials) ) {
+                $credentials = array();
                 if ( ! empty($_POST['log']) )
                         $credentials['user_login'] = $_POST['log'];
                 if ( ! empty($_POST['pwd']) )
@@ -37 +38 @@
         else
                 $credentials['remember'] = false;
 
+        // set default credential values
+        $credentials = array_merge( array('user_login' => '', 'user_password' => ''),  $credentials);
+
         // TODO do we deprecate the wp_authentication action?
         do_action_ref_array('wp_authenticate', array(&$credentials['user_login'], &$credentials['user_password']));