Ticket #21907: 21907.diff

wp-includes/class-wp-xmlrpc-server.php

@@ -203 +203 @@
          * @param string $password User's password.
          * @return mixed WP_User object if authentication passed, false otherwise
          */
-        function login($username, $password) {
+        function login( $username, $password ) {
                 // Respect any old filters against get_option() for 'enable_xmlrpc'.
                 $enabled = apply_filters( 'pre_option_enable_xmlrpc', false ); // Deprecated
                 if ( false === $enabled )
@@ -217 +217 @@
                         return false;
                 }
 
-                $user = wp_authenticate($username, $password);
+                $user = apply_filters( 'xmlrpc_userlogin_object', wp_authenticate( $username, $password ) );
 
-                if (is_wp_error($user)) {
-                        $this->error = new IXR_Error(403, __('Bad login/pass combination.'));
+                if ( is_wp_error( $user ) ) {
+                        $this->error = apply_filters( 'xmlrpc_userlogin_error', new IXR_Error( 403, __( 'Bad login/pass combination.' ) );
                         return false;
                 }