From df2f9960d1cc4fc42b36fffab3a8de040fa68080 Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Thu, 5 Aug 2004 15:54:15 +0000 Subject: [PATCH] stripslashes() from $pwd before performing the md5. Otherwise, we will not match the database password which had its slashes stripped before the MD5. git-svn-id: https://develop.svn.wordpress.org/trunk@1510 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-login.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-login.php b/wp-login.php index a813c1a416..311f3b6942 100644 --- a/wp-login.php +++ b/wp-login.php @@ -60,7 +60,7 @@ case 'login': if(!empty($_POST)) { $log = $_POST['log']; - $pwd = $_POST['pwd']; + $pwd = stripslashes($_POST['pwd']); $redirect_to = $_POST['redirect_to']; }