bugweb-cyradm - Bugs: bug #11924, admin account password bug in...

 
 

bug #11924: admin account password bug in 0.5.5-cvs

Submitted by:  None
Submitted on:  Thu 10 Feb 2005 06:20:09 PM UTC  
 
Category: mainSeverity: 4 - Important
Priority: 5 - NormalItem Group: normal bugs
Status: FixedPrivacy: Public
Assigned to: Luc de Louw <delouw>Originator Name: martynas@inet.lt
Originator Email: -unavailable-Open/Closed: Closed
Release: NoneOperating System: None
Reproducibility: Every TimePlanned Release: 0.5.5
Cyrus IMAP version: 2.1.xPHP version: 4.2
Database type: MySQL 3.23

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 11 Feb 2005 11:55:15 AM UTC, comment #1:

changeadminpassword and editadminuser had the same bug of using _POST variables in the SQL query. This has been solved now. Additionally, in lib/crypt.php there was a case statement for "crypt" missing.

Luc de Louw <delouw>
Project AdministratorIn charge of this item.
Thu 10 Feb 2005 06:20:09 PM UTC, original submission:

When you add admin user, it's all ok with password encryption. But if you change password for existing admin user, the password will be written non encrypted (just like you entered in web form). So, admin account become unusable.

Martynas

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 11 Feb 2005 11:55:15 AM UTCdelouwSeverity3 - Normal=>4 - Important
  StatusNone=>Fixed
  Assigned toNone=>delouw
  Open/ClosedOpen=>Closed

Back to the top


Powered by Savane 3.1-cleanup1