[TYPO3-english] Can I make usernames case-insensitive for	felogin?
    Xavier Perseguers 
    typo3 at perseguers.ch
       
    Thu Feb 11 09:58:19 CET 2010
    
    
  
Hi,
> I think it would be a great usability improvement to add
> case-insensitive usernames as an option. It looks like the actual
> username check doesn't happen in the extension felogin (or did I miss
> something?). Some pointers for where to look in the code are welcome.
First of all it may depend on client code. I don't know how you 
configured your FE login but show source of your BE login form. If you 
have superchallenge activated, you'll see this:
function doChallengeResponse(superchallenged) {	//
		password = document.loginform.p_field.value;
		if (password)	{
			if (superchallenged)	{
				password = MD5(password);	// this makes it superchallenged!!
			}
			str = 
document.loginform.username.value+":"+password+":"+document.loginform.challenge.value;
			document.loginform.userident.value = MD5(str);
			document.loginform.p_field.value = "";
			return true;
		}
	}
Meaning the username the user typed will be used to compute a MD5 hash 
with the password. If you ever want to have a case-insensitive username, 
you'll certainly want to change this code and force lowercase in the 
hash computation.
Same thing happens in auth service (search for it in Core) or have a 
look at existing extensions that provide authentication services. This 
will direct you to where the authentication process is actually taking 
place.
HTH
-- 
Xavier Perseguers
http://xavier.perseguers.ch/en
    
    
More information about the TYPO3-english
mailing list