Bug #61506
closed
Salted passwords are not imported from t3d using import/export module
Added by Nils Heuermann about 10 years ago.
Updated about 6 years ago.
Description
When importing a t3d file using the import/export module of Typo3 and the saltedpasswords extension is enabled user passwords will not be imported if they are already salted.
The method evaluateFieldValue in TYPO3\CMS\Saltedpasswords\Evaluation\Evaluator sets the "set" flag to false when saltedpasswords are enabled. After that there are some checks for the password hash method that might have processed the password value.
The problem is that IF the password is already a salted password, the "set" flag remains false - and therefore the imported password hash is not saved to the database.
To reproduce this:
- Export a page tree (t3d) with be_users or fe_users (which have a salted password stored in the database)
- Import t3d file
- Passwords of imported users are empty
I can confirm this. It happens also in the more narrow case when you export/import just the fe_users record.
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
- Target version set to next-patchlevel
Please test if the linked patch solves the problem. I didn't test the patch though.
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/35614
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
- Status changed from Resolved to Under Review
Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36409
- Status changed from Under Review to Resolved
- Status changed from Resolved to Closed
Also available in: Atom
PDF