WordPress.org
Get WordPress

Make WordPress Core

Opened 18 years ago

Closed 18 years ago

Last modified 12 years ago

#1714 closed defect (bug) (fixed)

changing the password to something with the char \ will cause login to fail

Reported by: daf's profile daf Owned by:
Milestone: Priority: high
Severity: critical Version: 1.5.2
Component: Security Keywords:
Focuses: Cc:

Description

This is probably becouse of php C like \ directives, so \n \0 etc will cause the function to fail and make login in impossible until password reset.

Attachments (1)

patch.txt​ (635 bytes) - added by donncha 18 years ago.

Download all attachments as: .zip

Change History (6)

#1 @ryan
18 years ago

  • Milestone changed from 1.5.2 to 1.6

#2 @donncha
18 years ago

The attached file is a patch to apply to admin-functions.php that checks the password for the "\" character and reports an error if it's used.

@donncha
18 years ago

#3 follow-up: @matt
18 years ago

  • Resolution set to fixed
  • Status changed from new to closed

This was already fixed.

#4 @(none)
17 years ago

  • Milestone 2.0 deleted

Milestone 2.0 deleted

#5 in reply to: ↑ 3 @hakre
12 years ago

Replying to matt:

This was already fixed.

Related: [3075]

Note: See TracTickets for help on using tickets.