Bug #82147
closed
Security status report gives error when install tool password is empty
100%
Description
To complete disable the install tool you just set the install tool password to an empty string.
But when salted password is set to phpass this results in an php error in het Security status report.
#1476107295: PHP Warning: strpos(): Empty needle in vendor/typo3/cms/typo3/sysext/saltedpasswords/Classes/Salt/PhpassSalt.php line 188
This due to the fact that the report tries to create a salt on the empty password what results in an php error.
The report should mark an not set password as secure.
Updated by Gerrit Code Review over 6 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757
Updated by Gerrit Code Review over 6 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757
Updated by Frans Saris over 6 years ago
- Related to Bug #81936: Installtool Empty Password Error added
Updated by Gerrit Code Review over 6 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757
Updated by Gerrit Code Review over 6 years ago
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53757
Updated by Gerrit Code Review over 6 years ago
Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53786
Updated by Frans Saris over 6 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 2798e522d73d6e338b124c2b1adf728b067146eb.
Updated by Gerrit Code Review over 6 years ago
- Status changed from Resolved to Under Review
Patch set 2 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/53786
Updated by Frans Saris over 6 years ago
- Status changed from Under Review to Resolved
Applied in changeset d919fbd244955f73ff45d2d6b28f73454c9a0600.
Updated by Mathias Brodala over 6 years ago
- Related to Bug #75290: empty needle-Error on login (saltedpasswords) added
Updated by