News:

CRITICAL UPGRADE CPG RELEASE 1.6.30
Version 1.6.30 removes a serious security issue that could allow unauthorized access to modify your site. Upgrade as soon as possible.

Main Menu

user update "won't" ignore password field

Started by mcdull, September 23, 2005, 07:34:19 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

mcdull

Originally, leaving password field blank would results in ignore the field and updating other values in user updating menu.
However, I just found that the lastest update in CSV won't ignore this field and keep warning "password cannot be less then 2 characters" something like that.
Please take a look...

Thanks

Nibbler

Thankyou for the report.

Old code:

if (strlen($user_password) && strlen($user_password) < 2) cpg_die(ERROR,$lang_register_php['err_password_short'], __FILE__, __LINE__);

Code changed by djmaze for utf stuff:

if (utf_strlen($user_password) < 2) cpg_die(ERROR, $lang_register_php['err_password_short'], __FILE__, __LINE__);

Newly comitted fix:

if ($user_password && utf_strlen($user_password) < 2) cpg_die(ERROR, $lang_register_php['err_password_short'], __FILE__, __LINE__);