stripslashes() from $pwd before performing the md5. Otherwise, we will not match the database password which had its slashes stripped before the MD5.

git-svn-id: http://svn.automattic.com/wordpress/trunk@1510 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2004-08-05 15:54:15 +00:00 · 2004-08-05 15:54:15 +00:00 · 1c803e1f58
parent 183a27dbea
commit 1c803e1f58
1 changed files with 1 additions and 1 deletions
--- a/wp-login.php
+++ b/wp-login.php
@ -60,7 +60,7 @@ case 'login':

 	if(!empty($_POST)) {
 		$log = $_POST['log'];
-		$pwd = $_POST['pwd'];
+		$pwd = stripslashes($_POST['pwd']);
 		$redirect_to = $_POST['redirect_to'];
 	}