Issue #844 has been updated by Clément OUDOT. Target version changed from self-service-password-? to self-service-password-1.0
See https://github.com/ltb-project/self-service-password/issues/33 ---------------------------------------- Bug #844: Posthook does not work with apostrophes http://tools.lsc-project.org/issues/844 Author: Dominik Menzi Status: Assigned Priority: Normal Assigned to: Clément OUDOT Category: Self Service Password Target version: self-service-password-1.0 When changing the password to something that ends with an apostrophe ('), the escaping mechanism used in change.php leads to the posthook being called with wrong arguments. Example: Username: tangresh old pw: welcome new pw: asdf' Expected: posthook called with "tangresh" "asdf'" "welcome" Actual: posthook called with "tangresh" "asdf welcome" (missing third argument) I have attached a patch which fixes the problem for change.php. The same change could probably be applied to the other two places where the posthook is called. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://tools.lsc-project.org/my/account
_______________________________________________ ltb-dev mailing list [email protected] http://lists.ltb-project.org/listinfo/ltb-dev
