[wp-trac] [WordPress Trac] #62794: Fatal error from wp-login.php if password is an array

WordPress Trac noreply at wordpress.org
Thu Jan 9 11:59:26 UTC 2025


#62794: Fatal error from wp-login.php if password is an array
--------------------------+-----------------------------
 Reporter:  leedxw        |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  6.7.1
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 If "pwd" is given as an array, it will generate a 500 error due to the use
 of trim()

 {{{
 $ curl http://localhost/wp-login.php -X POST -d
 'log=example&pwd[1]=example' -s -D - -o /dev/null | grep ^HTTP
 HTTP/1.1 500 Internal Server Error
 }}}

 {{{
 "PHP message: PHP Fatal error:  Uncaught TypeError: trim(): Argument #1
 ($string) must be of type string, array given in /var/www/html/wp-
 includes/pluggable.php:602
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62794>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list