WordPress.org

Make WordPress Core

Opened 2 years ago

Last modified 19 months ago

#23494 closed defect (bug)

impossible to log in with password containing leading or trailing spaces — at Version 1

Reported by: mich1 Owned by:
Milestone: 3.6 Priority: high
Severity: major Version: 2.5
Component: Users Keywords: needs-patch 2nd-opinion
Focuses: Cc:

Description (last modified by ocean90)

It is possible to set the password to something containing trailing or leading space characters (e.g. a single space), but the login dialog trims trailing or leading whitespaces. This makes it impossible to log in again.

It seems to me that the behavior of the login dialog is intended (see #15439), thus passwords with leading or trailing spaces should not be allowed.

Steps to reproduce (best with a new user account):

  • log in
  • change your password to something with leading or trailing spaces
  • log out
  • try to log in again. If you set your password to spaces only you will get the same error message as if you entered no password, otherwise you will get the message that the password you entered was wrong.

Note: When trying to create a user with leading or trailing spaces that differs only by those spaces from an existing user name there is an error message that the user name already exists, which is not totally correct. It still might be helpful though.

Change History (1)

comment:1 @ocean902 years ago

  • Description modified (diff)
Note: See TracTickets for help on using tickets.