I found a bug in 1.55.* which is now fixed in trunk.

in gluon/sqlhtml.py '******' should be '********'.

the effect of this bug is that when you update your profile in T2 for
example and you do not type your password, the password is reset to
******. The normal behavior should be that if you do not type anything
your password remains unchanged.

This is a part of a security mechanism that prevents web2py from ever
sending back to the browser a password field, even when you edit a
record containing a password field.

Sorry about this.

Massimo


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py Web Framework" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to