new user registration process
-
Trying to understand the new user registration process. When the site authenticates against an external provider and creates a user in the wordpress users table, what password is it storing in the wordpress users table?
Essentially, does the wordpress users table get populated with whatever ldap/google/etc password the user had when they registered their account on the WP site, or is some other dummy/gibberish password stored locally?
Essentially, the concern is how much security we need to build around our wordpress database. If it’s effectively caching first-time-reg passwords, we have to follow far more stringent security policies around the site design and maintenance (and our security team may straight up veto the option).
The topic ‘new user registration process’ is closed to new replies.