Make WordPress Core

Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#58029 closed enhancement (duplicate)

Show MySQL password as "password" and not as text in wordpress installation

Reported by: d0tunix Owned by:
Priority: normal Milestone:
Component: Upgrade/Install Version: 6.3
Severity: normal Keywords: has-patch has-screenshots
Cc: Focuses:

Description

It is better for the MySQL password to be displayed as "password" rather than in plain text during the WordPress installation process for security reasons. When a password is displayed in plain text, it becomes easier for malicious individuals to intercept and access sensitive information, potentially leading to security breaches and data theft.

Displaying the password as "password" instead of in plain text provides an extra layer of security by obscuring the actual password, making it harder for attackers to access the system. This technique is called "hashing," which involves converting the password into a unique string of characters that cannot be reversed or decrypted.

In addition, displaying the password as "password" during the installation process can also prevent mistakes caused by typos or human error. This is because users are less likely to accidentally copy and paste the wrong information if the password is already displayed for them.

Overall, obscuring the MySQL password during the WordPress installation process is a good security practice that can help protect sensitive information and prevent security breaches.

Attachments (2)

SCR-20230330-shpm.png (3.0 KB ) - added by d0tunix 3 years ago.
Shows an image of what my patch changes.
task-set-password-input.type.diff (864 bytes ) - added by d0tunix 3 years ago.

Download all attachments as: .zip

Change History (6)

@d0tunix
3 years ago

Shows an image of what my patch changes.

#2 @d0tunix
3 years ago

  • Keywords has-screenshots added
  • Summary Show password as "password" and not as text in wordpress installationShow MySQL password as "password" and not as text in wordpress installation
  • Type feature requestenhancement

#3 @SergeyBiryukov
3 years ago

  • Component GeneralUpgrade/Install
  • Milestone Awaiting Review
  • Resolutionduplicate
  • Status newclosed

Hi there, welcome to WordPress Trac!

Thanks for the ticket, we're already tracking this enhancement in #3534.

@d0tunix commented on PR #4268:


3 years ago
#4

Closing this since its a duplicate of the Trac tickt: #3534

Note: See TracTickets for help on using tickets.