Make WordPress Core

Opened 21 years ago

Closed 21 years ago

Last modified 15 years ago

#1714 closed defect (bug) (fixed)

changing the password to something with the char \ will cause login to fail

Reported by: daf Owned by:
Priority: high Milestone:
Component: Security Version: 1.5.2
Severity: critical Keywords:
Cc: Focuses:

Description

This is probably becouse of php C like \ directives, so \n \0 etc will cause the function to fail and make login in impossible until password reset.

Attachments (1)

patch.txt (635 bytes ) - added by donncha 21 years ago.

Download all attachments as: .zip

Change History (6)

#1 @ryan
21 years ago

  • Milestone 1.5.21.6

#2 @donncha
21 years ago

The attached file is a patch to apply to admin-functions.php that checks the password for the "\" character and reports an error if it's used.

@donncha
21 years ago

#3 follow-up: @matt
21 years ago

  • Resolutionfixed
  • Status newclosed

This was already fixed.

#4 @(none)
20 years ago

  • Milestone 2.0

Milestone 2.0 deleted

#5 in reply to: ↑ 3 @hakre
15 years ago

Replying to matt:

This was already fixed.

Related: [3075]

Note: See TracTickets for help on using tickets.