Project

General

Profile

Actions

Bug #78411

closed

Backend user with empty password can be created

Added by Josef Glatz over 7 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
FormEngine aka TCEforms
Target version:
Start date:
2016-10-24
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Problem/Description

Actually it's possible to create a be user in the TYPO3 backend without setting an password.

Steps to reproduce

  • Login as admin
  • Switch to list module
  • open PID 0
  • create new be user
    • only fill out username
  • press save

Now the user is created and the password field is empty. I can reproduce it with Chrome and Safari.
Only tested in 8.5.0-dev Master.

Seems like, the problem is, that it's filled with a real value instead of displaying just a placeholder attribute. (The require check don't work)

ToDo(s)

  • Prevent adding a backend user without password

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #72182: BE Users can be created without a username and password due to chrome autofillClosed2015-12-11

Actions
Actions

Also available in: Atom PDF