Ticket #24367: 24367.2.patch

wp-admin/includes/user.php

@@ -124 +124 @@
         }
 
         /* Check for "\" in password */
-        if ( false !== strpos( stripslashes($pass1), "\\" ) )
+        if ( false !== strpos( $pass1, "\\" ) )
                 $errors->add( 'pass', __( '<strong>ERROR</strong>: Passwords may not contain the character "\\".' ), array( 'form-field' => 'pass1' ) );
 
         /* checking the password has been typed twice the same */

wp-includes/user.php

@@ -27 +27 @@
                 if ( ! empty($_POST['log']) )
                         $credentials['user_login'] = $_POST['log'];
                 if ( ! empty($_POST['pwd']) )
-                        $credentials['user_password'] = $_POST['pwd'];
+                        $credentials['user_password'] = wp_unslash( $_POST['pwd'] );
                 if ( ! empty($_POST['rememberme']) )
                         $credentials['remember'] = $_POST['rememberme'];
         }