Make WordPress Core

#21125 closed defect (bug) (fixed)

Eliminate $user_pass_md5

Reported by: nacin Owned by: nacin
Milestone: 3.5 Priority: normal
Severity: normal Version:
Component: Users Keywords:
Focuses: Cc:


The $user_pass_md5 global stores an md5 hash of the user_pass hash, which makes no sense. It has roots in b2 (see [8/trunk/b2-include/b2functions.php]) and for all I know, b2 used to store plain text passwords and this actually was the md5 at one point. No plugin is using it unless they copy-pasted from setup_userdata(). Time for it to go.

Change History (1)

comment:1 nacin22 months ago

  • Owner set to nacin
  • Resolution set to fixed
  • Status changed from new to closed

In [21202]:

Eliminate $user_pass_md5. fixes #21125.

Note: See TracTickets for help on using tickets.