Changeset 49118 for trunk/src/wp-admin/includes/user.php

Timestamp:

10/10/2020 04:49:35 PM (4 years ago)

Author:

adamsilverstein

Message:

Users: prevent saving empty passwords, trim space from password ends on save.

Fix an issue where users could save a password with only spaces, or spaces at the beginning or end of their password, preventing them from logging in.

Props ronakganatra, 1naveengiri, ajensen, oolleegg55, bookdude13, nrqsnchz, aristath.
Fixes #42766.

File:

• trunk/src/wp-admin/includes/user.php (modified) (1 diff)

trunk/src/wp-admin/includes/user.php

@@ -48 +48 @@
     $pass2 = '';
     if ( isset( $_POST['pass1'] ) ) {
-        $pass1 = $_POST['pass1'];
+        $pass1 = trim( $_POST['pass1'] );
     }
     if ( isset( $_POST['pass2'] ) ) {
-        $pass2 = $_POST['pass2'];
+        $pass2 = trim( $_POST['pass2'] );
     }