WordPress.org

Make WordPress Core

Opened 4 years ago

Last modified 6 months ago

#36098 new defect (bug)

Install: "Repeat Password" is not required when browser js is disabled

Reported by: ramiy Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Login and Registration Keywords: has-screenshots has-patch close
Focuses: ui Cc:

Description

Recreate:

  1. Turn off browser JS.
  2. Install WordPress.
  3. Go to step 2.

The "Repeat Password" field is marked as required. It's not.


Recreate this step by step:

Leave all fields empty and press the install button.
You will see an error saying: Please provide a valid username.

Enter invalid username (use spaces).
You will see an error saying: The username you provided has invalid characters.

Enter valid username.
You will see an error saying: You must provide an email address.

Enter some text (not an email).
You will see this error message: Sorry, that isn’t a valid email address. Email addresses look like username@example.com.

If you provide a valid email, it will install WordPress. Password is not required!

Attachments (9)

error-missing-username.png (22.7 KB) - added by ramiy 4 years ago.
error-invalid-username.png (24.7 KB) - added by ramiy 4 years ago.
error-missing-email.png (23.6 KB) - added by ramiy 4 years ago.
error-invalid-email.png (37.1 KB) - added by ramiy 4 years ago.
36098.patch (525 bytes) - added by ramiy 4 years ago.
user-edit-password-without-js.png (15.6 KB) - added by ramiy 4 years ago.
error-passwords-dont-match.png (24.8 KB) - added by ramiy 4 years ago.
error_only_one_pass.PNG (34.9 KB) - added by bookdude13 6 months ago.
When password is only entered in one of the two fields (same either way)
install_no_pass_generated.PNG (18.1 KB) - added by bookdude13 6 months ago.
When no password is entered, one is generated.

Download all attachments as: .zip

Change History (16)

#1 @ramiy
4 years ago

  • Keywords has-screenshots added

@ramiy
4 years ago

#2 @ramiy
4 years ago

  • Keywords has-patch added

The patch removes the (required) strings from the Repeat Password field.

#3 @ramiy
4 years ago

One more thing, when changing passwords for existing users (user-edit.php) or changing your own password (profile.php) this field is not marked as required.

#4 @ramiy
4 years ago

When you enter only the new password and update (without repeating the password), you will see an error message saying ERROR: Please enter the same password in both password fields.

When you do that on install screen, you will see an error saying: Your passwords do not match. Please try again.

#5 @ocean90
4 years ago

  • Component changed from I18N to Login and Registration

#6 @bookdude13
6 months ago

  • Keywords close added

Hey @raimy, thanks for the ticket! Sorry it took so long for a response.

I just checked this on the latest version and it seems that the repeated password is required for an install. Leaving both blank leads to a password being generated. All other fields act the same as when you saw this.

Since this appears to have been fixed, marking this as close.

@bookdude13
6 months ago

When password is only entered in one of the two fields (same either way)

@bookdude13
6 months ago

When no password is entered, one is generated.

#7 @bookdude13
6 months ago

On second thought, if the username and emails are actually required, why aren't those inputs (and the first password box) marked as required?

And why is the repeat password box marked as required with text and not with a red asterisk like most forms nowadays?

Note: See TracTickets for help on using tickets.