Issue when changing login name but not password

Issue when changing login name but not password

Postby nekpap » Wed Jun 15, 2016 9:22 pm

Hi!

When changing login name but not password (left it blank) the account is locked!
Is this a bug?

Nektarios
nekpap
 
Posts: 27
Joined: Wed Dec 03, 2014 4:11 pm

Re: Issue when changing login name but not password

Postby admin » Tue Jun 21, 2016 9:33 am

nekpap,

The password is encoded using username and password. If you change the username, the password will change.

Steven
admin
Site Admin
 
Posts: 3372
Joined: Mon Jun 15, 2009 9:53 am

Re: Issue when changing login name but not password

Postby nekpap » Fri Jul 01, 2016 2:44 am

Steven,

here is the full story :

User Name : nekpap
Password : 1234
password stored : md5('nekpap1234') -> b36c175e4173e43db646318c6d56b5a5

when you change to
User Name: nektarios

whithout to fill the "New Password" and "Retype New Password" fields the stored password DO NOT change. It remains b36c175e4173e43db646318c6d56b5a5 and the account is locked because the user name changed.

it should be

md5('nektarios1234') -> 0317fd1d836a9f76ace0142e1cdd75af OR
md5('nektarios') -> 06d1f642b936f374e06befbf20e620e5

OR prevent the user not to left Password fields empty.

Thanks
Nektarios
Attachments
screen3.png
screen3.png (22.43 KiB) Viewed 3720 times
screen2.png
screen2.png (7.48 KiB) Viewed 3720 times
nekpap
 
Posts: 27
Joined: Wed Dec 03, 2014 4:11 pm


Return to General



cron