diff --git a/wp-includes/version.php b/wp-includes/version.php index 407c963bbd..972825a931 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.0-alpha-53066'; +$wp_version = '6.0-alpha-53067'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. diff --git a/wp-login.php b/wp-login.php index 45c207d81a..781f8b246f 100644 --- a/wp-login.php +++ b/wp-login.php @@ -904,7 +904,17 @@ switch ( $action ) { $errors = new WP_Error(); - if ( isset( $_POST['pass1'] ) && $_POST['pass1'] !== $_POST['pass2'] ) { + // Check if password is one or all empty spaces. + if ( ! empty( $_POST['pass1'] ) ) { + $_POST['pass1'] = trim( $_POST['pass1'] ); + + if ( empty( $_POST['pass1'] ) ) { + $errors->add( 'password_reset_empty_space', __( 'The password cannot be a space or all spaces.' ) ); + } + } + + // Check if password fields do not match. + if ( ! empty( $_POST['pass1'] ) && $_POST['pass1'] !== trim( $_POST['pass2'] ) ) { $errors->add( 'password_reset_mismatch', __( 'Error: The passwords do not match.' ) ); }