Project

General

Profile

Actions

Bug #82147

closed

Security status report gives error when install tool password is empty

Added by Frans Saris almost 7 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2017-08-21
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

To complete disable the install tool you just set the install tool password to an empty string.

But when salted password is set to phpass this results in an php error in het Security status report.

#1476107295: PHP Warning: strpos(): Empty needle in vendor/typo3/cms/typo3/sysext/saltedpasswords/Classes/Salt/PhpassSalt.php line 188

This due to the fact that the report tries to create a salt on the empty password what results in an php error.

The report should mark an not set password as secure.


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #81936: Installtool Empty Password ErrorClosed2017-07-20

Actions
Related to TYPO3 Core - Bug #75290: empty needle-Error on login (saltedpasswords)Closed2016-03-29

Actions
Actions #1

Updated by Gerrit Code Review almost 7 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757

Actions #2

Updated by Gerrit Code Review almost 7 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757

Actions #3

Updated by Frans Saris almost 7 years ago

  • Related to Bug #81936: Installtool Empty Password Error added
Actions #4

Updated by Gerrit Code Review almost 7 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757

Actions #5

Updated by Gerrit Code Review almost 7 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757

Actions #6

Updated by Gerrit Code Review almost 7 years ago

Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53786

Actions #7

Updated by Frans Saris almost 7 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #8

Updated by Gerrit Code Review almost 7 years ago

  • Status changed from Resolved to Under Review

Patch set 2 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53786

Actions #9

Updated by Frans Saris almost 7 years ago

  • Status changed from Under Review to Resolved
Actions #10

Updated by Mathias Brodala over 6 years ago

  • Related to Bug #75290: empty needle-Error on login (saltedpasswords) added
Actions #11

Updated by Benni Mack almost 6 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF