Make WordPress Core


Ignore:
Timestamp:
10/10/2020 04:49:35 PM (4 years ago)
Author:
adamsilverstein
Message:

Users: prevent saving empty passwords, trim space from password ends on save.

Fix an issue where users could save a password with only spaces, or spaces at the beginning or end of their password, preventing them from logging in.

Props ronakganatra, 1naveengiri, ajensen, oolleegg55, bookdude13, nrqsnchz, aristath.
Fixes #42766.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/tests/phpunit/tests/user.php

    r48939 r49118  
    14521452     *
    14531453     * @ticket 35715
     1454     * @ticket 42766
    14541455     */
    14551456    function test_edit_user_blank_pw() {
     
    14921493        $this->assertSame( 'nickname_updated', $user->nickname );
    14931494
     1495        // Check not to change an old password if a new password contains only spaces. Ticket #42766
     1496        $user           = get_user_by( 'ID', $user_id );
     1497        $old_pass       = $user->user_pass;
     1498        $_POST['pass2'] = '  ';
     1499        $_POST['pass1'] = '  ';
     1500
     1501        $user_id = edit_user( $user_id );
     1502        $user    = get_user_by( 'ID', $user_id );
     1503
     1504        $this->assertInternalType( 'int', $user_id );
     1505        $this->assertEquals( $old_pass, $user->user_pass );
     1506
    14941507        // Check updating user with missing second password.
    14951508        $_POST['nickname'] = 'nickname_updated2';
Note: See TracChangeset for help on using the changeset viewer.