Skip to:
Content

BuddyPress.org

Opened 9 years ago

Closed 9 years ago

Last modified 9 years ago

#7594 closed defect (bug) (fixed)

Strip slashes from passwords before checking for backslashes

Reported by: JohnPBloch Owned by: djpaul
Priority: normal Milestone: 3.0
Component: Settings Version: 2.9.0
Severity: normal Keywords: has-patch
Cc:

Description

When saving a password in BuddyPress, it should unslash the password before checking for backslashes. This is ​what core does when saving user data. WordPress passwords may contain ' single and " double quotes in them, which will arrive from POST data slashed.

Attachments (1)

7594.patch​ (682 bytes ) - added by JohnPBloch 9 years ago.

Download all attachments as: .zip

Change History (4)

@JohnPBloch
9 years ago

#1 @JohnPBloch
9 years ago

  • Keywords has-patch added

Not a whole lot going on in the patch, just fixes the issue. :D

#2 @djpaul
9 years ago

  • Owner set to djpaul
  • Resolution → fixed
  • Status new → closed

In 11704:

Core: strip slashes from passwords before checking for backslashes.

Fixes #7594

Props JohnPBloch

#3 @DJPaul
9 years ago

  • Milestone Awaiting Review → 3.0

Great find @JohnPBloch, thank you for the patch. That's probably been there 8 years. :)

Last edited 9 years ago by DJPaul (previous) (diff)
Note: See TracTickets for help on using tickets.