Make WordPress Core

Opened 22 months ago

Closed 22 months ago

Last modified 22 months ago

#58029 closed enhancement (duplicate)

Show MySQL password as "password" and not as text in wordpress installation

Reported by: d0tunix's profile d0tunix Owned by:
Milestone: Priority: normal
Severity: normal Version: 6.3
Component: Upgrade/Install Keywords: has-patch has-screenshots
Focuses: Cc:

Description

It is better for the MySQL password to be displayed as "password" rather than in plain text during the WordPress installation process for security reasons. When a password is displayed in plain text, it becomes easier for malicious individuals to intercept and access sensitive information, potentially leading to security breaches and data theft.

Displaying the password as "password" instead of in plain text provides an extra layer of security by obscuring the actual password, making it harder for attackers to access the system. This technique is called "hashing," which involves converting the password into a unique string of characters that cannot be reversed or decrypted.

In addition, displaying the password as "password" during the installation process can also prevent mistakes caused by typos or human error. This is because users are less likely to accidentally copy and paste the wrong information if the password is already displayed for them.

Overall, obscuring the MySQL password during the WordPress installation process is a good security practice that can help protect sensitive information and prevent security breaches.

Attachments (2)

SCR-20230330-shpm.png (3.0 KB) - added by d0tunix 22 months ago.
Shows an image of what my patch changes.
task-set-password-input.type.diff (864 bytes) - added by d0tunix 22 months ago.

Download all attachments as: .zip

Change History (6)

@d0tunix
22 months ago

Shows an image of what my patch changes.

#2 @d0tunix
22 months ago

  • Keywords has-screenshots added
  • Summary changed from Show password as "password" and not as text in wordpress installation to Show MySQL password as "password" and not as text in wordpress installation
  • Type changed from feature request to enhancement

#3 @SergeyBiryukov
22 months ago

  • Component changed from General to Upgrade/Install
  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hi there, welcome to WordPress Trac!

Thanks for the ticket, we're already tracking this enhancement in #3534.

@d0tunix commented on PR #4268:


22 months ago
#4

Closing this since its a duplicate of the Trac tickt: #3534

Note: See TracTickets for help on using tickets.