[Bug] New Password That Changed From Profile Settings Does Not Work

[mandro]

Dear BuddyPress Team.

I found an important on BuddyPress

After change password from the Profile Settings, please logout. And then, if your try to login, the New Password will not works.

​https://snipboard.io/qerD8l.jpg

I check the database and found the user password format does not changed to MD5.

[imath]

Thanks for your report @mandro

I confirm the issue. This is pretty annoying. We'll try to fix it asap.

[imath]

The attached patch should fix the password issue, but I need to make sure it has no side effects on the email change feature.

I'll run some complementary tests asap.

[imath]

In 13031:

Settings: Make sure changing pwd from the General Screen encrypts it

Using a WP_User object to set the password to update was misleading WordPress wp_update_user() function. The new password was interpreted as the current password and was not encrypted.

Passing a regular array to the wp_update_user() function avoids the risk of messing with WP User object cache.

Props mandro

See #8539 (branch 9.0)

[imath]

In 13032:

Settings: Make sure changing pwd from the General Screen encrypts it

Using a WP_User object to set the password to update was misleading WordPress wp_update_user() function. The new password was interpreted as the current password and was not encrypted.

Passing a regular array to the wp_update_user() function avoids the risk of messing with WP User object cache.

Props mandro

Fixes #8539 (trunk)