10up / wpsnapshots

(DEPRECATED) A project sharing tool for WordPress.
MIT License
215 stars 22 forks source link

Feature/stronger auth #61

Closed tylercherpak closed 4 years ago

tylercherpak commented 4 years ago

Description of the Change

Randomly generate passwords for each user when we replace their password instead of using the same password for every user, also add a random string to the email address for additional hardening.

Benefits

Additional security for using snapshots in a publicly accessible manner such as a staging environment.

Possible Drawbacks

Harder to test when logging in as a user. Use wp-cli to reset passwords as needed.

Verification Process

All the hashed passwords in the db should be different.

Checklist:

Applicable Issues

Changelog Entry

Security: Randomly generate passwords for each user when we replace their password instead of using the same password for every user, also add a random string to the email address for additional hardening.