Bug #61506
closedSalted passwords are not imported from t3d using import/export module
100%
Description
When importing a t3d file using the import/export module of Typo3 and the saltedpasswords extension is enabled user passwords will not be imported if they are already salted.
The method evaluateFieldValue in TYPO3\CMS\Saltedpasswords\Evaluation\Evaluator sets the "set" flag to false when saltedpasswords are enabled. After that there are some checks for the password hash method that might have processed the password value.
The problem is that IF the password is already a salted password, the "set" flag remains false - and therefore the imported password hash is not saved to the database.
To reproduce this:
- Export a page tree (t3d) with be_users or fe_users (which have a salted password stored in the database)
- Import t3d file
- Passwords of imported users are empty
Updated by Vlatko Šurlan almost 10 years ago
I can confirm this. It happens also in the more narrow case when you export/import just the fe_users record.
Updated by Gerrit Code Review almost 10 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Updated by Markus Klein almost 10 years ago
- Target version set to next-patchlevel
Please test if the linked patch solves the problem. I didn't test the patch though.
Updated by Gerrit Code Review almost 10 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Updated by Gerrit Code Review almost 10 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Updated by Gerrit Code Review almost 10 years ago
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Updated by Markus Klein almost 10 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 3c78bf8f8b68c46a4573f56aabf175ddd63dc991.
Updated by Gerrit Code Review almost 10 years ago
- Status changed from Resolved to Under Review
Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36409
Updated by Markus Klein almost 10 years ago
- Status changed from Under Review to Resolved
Applied in changeset 6e18e33dbaf68f3dbe44a6717d915d05ca4cd143.