Context Navigation

← Previous Ticket
Next Ticket →

#29880 closed defect (bug) (fixed)

wp_insert_user() wiping out user_pass when one isn't provided and the user exists

Reported by:	cartpauj	Owned by:	chriscct7
Priority:	normal	Milestone:	4.4
Component:	Users	Version:	4.0
Severity:	normal	Keywords:	has-patch needs-refresh
Cc:		Focuses:

Description

This is similar to #21495 but not identical.

Passing wp_insert_user() the following for example, will cause the Users password to be nullified if the user already exists:

array(6) {

  ["role"]=>

  string(10) "subscriber"

  ["user_login"]=>

  string(15) "test"

  ["user_email"]=>

  string(15) "test@example.com"

  ["first_name"]=>

  string(3) "John"

  ["last_name"]=>

  string(3) "Doe"

  ["ID"]=>

  int(123)

}

I propose changing (found here: http://cspf.co/XvqW)

$user_pass = $userdata['user_pass'];

to this or something similar

$user_pass = (isset($userdata['user_pass']) && !empty($userdata['user_pass']))?$userdata['user_pass']:$old_user_data->user_pass;

Attachments (3)

29880.diff (1.5 KB ) - added by leewillis77 12 years ago.
29880.2.diff (1.1 KB ) - added by leewillis77 12 years ago.
29880.3.patch (1.1 KB ) - added by chriscct7 11 years ago.

Download all attachments as: .zip

Change History (11)

#1 @leewillis77
12 years ago

Keywords has-patch added

Attached is a patch, with tests, that implements this behaviour.

@leewillis77
12 years ago

Attachment 29880.diff added

#2 @SergeyBiryukov
12 years ago

Related: #25745

#3 @leewillis77
12 years ago

Hi Sergey,

Thanks for your comment - in that case perhaps deprecating the use case of passing a user ID is the better solution here. Patch attached.

@leewillis77
12 years ago

Attachment 29880.2.diff added

@chriscct7
11 years ago

Attachment 29880.3.patch added

#4 @chriscct7
11 years ago

Keywords commit added
Milestone Awaiting Review → 4.4
Owner set to chriscct7
Status new → accepted

#5 @SergeyBiryukov
11 years ago

Looks like this was a regression in [28454], so 29880.diff might be the way to go.

#6 @SergeyBiryukov
11 years ago

Keywords needs-refresh added; commit removed

#7 @wonderboymusic
11 years ago

Resolution → fixed
Status accepted → closed

In 35618:

Users: in wp_insert_user(), when a password isn't provided and the user exists, ensure that the password isn't wiped out.

Adds unit test.

Props leewillis77.
Fixes #29880.

#8 @SergeyBiryukov
11 years ago

In 35732:

Users: Move the tests added in [35116] and [35618] to a more appropriate place and give them a better name.

See #28435, #29880.

Note: See TracTickets for help on using tickets.

Download in other formats:

Make WordPress Core

Context Navigation

#29880 closed defect (bug) (fixed)

wp_insert_user() wiping out user_pass when one isn't provided and the user exists

Description

Attachments (3)

Change History (11)

#1 @leewillis77 12 years ago

@leewillis77 12 years ago

#2 @SergeyBiryukov 12 years ago

#3 @leewillis77 12 years ago

@leewillis77 12 years ago

@chriscct7 11 years ago

#4 @chriscct7 11 years ago

#5 @SergeyBiryukov 11 years ago

#6 @SergeyBiryukov 11 years ago

#7 @wonderboymusic 11 years ago

#8 @SergeyBiryukov 11 years ago

Download in other formats:

#1 @leewillis77
12 years ago

@leewillis77
12 years ago

#2 @SergeyBiryukov
12 years ago

#3 @leewillis77
12 years ago

@leewillis77
12 years ago

@chriscct7
11 years ago

#4 @chriscct7
11 years ago

#5 @SergeyBiryukov
11 years ago

#6 @SergeyBiryukov
11 years ago

#7 @wonderboymusic
11 years ago

#8 @SergeyBiryukov
11 years ago