WordPress.org

Make WordPress Core

Ticket #24367: 24367.patch

File 24367.patch, 523 bytes (added by ocean90, 8 years ago)
  • wp-includes/user.php

     
    2727                if ( ! empty($_POST['log']) )
    2828                        $credentials['user_login'] = $_POST['log'];
    2929                if ( ! empty($_POST['pwd']) )
    30                         $credentials['user_password'] = $_POST['pwd'];
     30                        $credentials['user_password'] = wp_unslash( $_POST['pwd'] );
    3131                if ( ! empty($_POST['rememberme']) )
    3232                        $credentials['remember'] = $_POST['rememberme'];
    3333        }