search

roots / wp-password-bcrypt

WordPress plugin to implement secure bcrypt hashed passwords
https://roots.io/improving-wordpress-password-security/
MIT License
616 stars 67 forks source link

Ensure the hashed password is always returned #41

Closed johnbillion closed 1 week ago

johnbillion commented 1 week ago

There's a rogue return; in the wp_set_password() function. This fixes that.

The application password tests for this need to be run in separate processes to avoid trying to redeclare WP_Application_Passwords during testing.

swalkinshaw commented 1 week ago

Thanks for the extra test coverage 🎉