Issue #844 has been reported by Dominik Menzi.
----------------------------------------
Bug #844: Posthook does not work with apostrophes
http://tools.lsc-project.org/issues/844
Author: Dominik Menzi
Status: New
Priority: Normal
Assigned to:
Category: Self Service Password
Target version:
When changing the password to something that ends with an apostrophe ('), the
escaping mechanism used in change.php leads to the posthook being called with
wrong arguments.
Example:
Username: tangresh
old pw: welcome
new pw: asdf'
Expected:
posthook called with "tangresh" "asdf'" "welcome"
Actual:
posthook called with "tangresh" "asdf welcome" (missing third argument)
I have attached a patch which fixes the problem for change.php. The same change
could probably be applied to the other two places where the posthook is called.
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://tools.lsc-project.org/my/account
_______________________________________________
ltb-dev mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-dev
