make sure you ALWAYS pass

CRYPT(auth.setting.hmac_key)

to CRYPT.



On Feb 11, 9:50 am, aure <[email protected]> wrote:
> Hi everyone,
>
> I have customised my table for authentificaition, as shown by Massimo
> here:http://groups.google.com/group/web2py/browse_thread/thread/f4ae0f4c5b...
>
> If I put CRYPT() before IS_NOT_EMPTY(...) in the list of requirements
> for the field 'password', users can register with an empty password.
> If IS_NOT_EMPTY(...) comes first, everything works fine.
>
> Problematic Code:
>
> Field('password', 'password', readable=False, label=T('Password'),
> requires=[CRYPT(),IS_NOT_EMPTY(error_message=T('enter a value'))]),
>
> Non Problematic Code:
> Field('password', 'password', readable=False, label=T('Password'),
> requires=[IS_NOT_EMPTY(error_message=T('enter a value')),CRYPT()]),
>
> Aurelien

-- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.

Reply via email to