com web/bugs: - Sets an auto-generated when no password is supplied: www/report.php
| From: | Felipe Pena | Date: | Sun, 17 Jun 2012 17:58:19 +0000 |
| Subject: | com web/bugs: - Sets an auto-generated when no password is supplied: www/report.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-13709@lists.php.net to get a copy of this message | ||
Commit: e64ca427aee9c6320d5ec6044dcc7ea873b625df
Author: Felipe Pena <felipensp@gmail.com> Sun, 17 Jun 2012 14:58:19 -0300
Parents: e0aa56c7b62e7ef124231f88cde28a38dd6bc99b
Branches: master
Link: http://git.php.net/?p=web/bugs.git;a=commitdiff;h=e64ca427aee9c6320d5ec6044dcc7ea873b625df
Log:
- Sets an auto-generated when no password is supplied
Changed paths:
M www/report.php
Diff:
diff --git a/www/report.php b/www/report.php
index 3030ff0..df2f9c7 100644
--- a/www/report.php
+++ b/www/report.php
@@ -38,9 +38,9 @@ if (isset($_POST['in'])) {
}
}
- // Set password blank for logged in users. This also disables the lost password feature.
- if ($logged_in) {
- $_POST['in']['passwd'] = '';
+ // Set auto-generated password when not supplied or logged in
+ if ($logged_in || $_POST['in']['passwd'] == '') {
+ $_POST['in']['passwd'] = uniqid();
}
// try to verify the user