[wp-trac] [WordPress Trac] #59824: PHP Warning raised in pluggable.php when passing NULL instead of a string

[WordPress Trac]

#59824: PHP Warning raised in pluggable.php when passing NULL instead of a string
-------------------------------------+-------------------------------------
 Reporter:  budiony                  |       Owner:  (none)
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Security                 |     Version:  6.3.3
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch reporter-      |     Focuses:  administration,
  feedback                           |  privacy
-------------------------------------+-------------------------------------
Changes (by johnbillion):

 * keywords:  has-patch => has-patch reporter-feedback


Comment:

 @budiony Thanks for the report and sorry nobody got back to you sooner.

 There is no code path in WordPress core that allows a `null` value to be
 passed to `check_password()`. Every call to `wp_check_password()` is
 preceded with either a guard condition for an empty password or with a
 string manipulation function that casts a null value to a string.

 Do you have a plugin installed on your site that calls `check_password()`
 or otherwise deals with authentication or passwords on your site? I
 suspect that such a plugin (or theme) is the actual root cause of the
 warning you're seeing on your site.

 @debarghyabanerjee Please be more careful with your PRs. Attempting to fix
 a problem without first being able to reproduce it is not helpful and not
 a good use of your time or that of people who review the PR. An AI-
 generated PR summary is fine as long as you verify that everything that is
 says is accurate, which this is not.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59824#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform