[TYPO3-core] RFC: Bug: #17087: BE user's password not changable via setup module with "saltedpasswords" enabled

Marcus Krause marcus#exp2010 at t3sec.info
Thu Jan 20 00:21:00 CET 2011


Hi,


This is a SVN patch request.

Type: Bugfix
Bugtracker reference: http://bugs.typo3.org/view.php?id=17087
Branch: 4-3, 4-4, trunk


Problem:
If EXT:saltedpasswords is installed but not enabled for the BE,
an user is unable to change his password via setup module.
An unconditional deactivation of clientside md5 password hashing
causes the md5 evaluation in tcemain to fail.


Solution:
Encapsulate the md5 resettings stuff with a test if saltedpasswords
is enabled for the BE.
Comment the piece of code.


Additional Notes:
Patch was made against trunk.
A more detailed bug analysis can be found in the bug tracker!


Regards,
Marcus.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 17087.diff
Type: text/x-diff
Size: 835 bytes
Desc: not available
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20110120/d4700dfa/attachment.diff>


More information about the TYPO3-team-core mailing list