[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date
][Interchange by thread
]
[ic] change_pass with ignore_case
Quoting Mike Weisenborn (mw@clearbuilt.com):
> We're running Interchange 4.8.5 and just recently launched our first
> Interchange site. We've been very pleased with the software, and I'd
> like to thank everyone who has been involved in its development.
>
> We are using the userdb function change_pass along with the ignore_case
> option (specified in our catalog.cfg). As far as I can tell, the
> change_pass function does not honor the ignore_case option, and this can
> lead to confusing behavior for the user and possibly even to disabling
> an account (if the user sets his/her password to something with capital
> letters then the login function will never match that password, because
> it will always lowercase the password before testing).
>
> I've included the patch we used to fix the problem (for us). I have not
> done extensive testing of the patch outside of our normal operating
> environment, but it appears to have very little chance of affecting
> anything else because of its very limited scope.
>
> If we've overlooked something that we should have known which would make
> this patch redundant or if the patch has other problems I would
> appreciate any feedback.
>
> Thanks,
> Mike
>
> --- UserDB.pm.orig Thu Jul 18 16:19:56 2002
> +++ UserDB.pm Thu Jul 18 16:24:18 2002
> @@ -1171,6 +1171,13 @@
> if ref $_[0];
>
> my(%options) = @_;
> +
> + if ($self->{OPTIONS}{ignore_case}) {
> + $self->{USERNAME} = lc $self->{USERNAME};
> + $self->{OLDPASS} = lc $self->{OLDPASS};
> + $self->{PASSWORD} = lc $self->{PASSWORD};
> + $self->{VERIFY} = lc $self->{VERIFY};
> + }
>
> eval {
> my $super = $Vend::superuser || (
Patched in stable and devel. Thanks Mike!
--
Mike Heins
Perusion -- Expert Interchange Consulting http://www.perusion.com/
phone +1.513.523.7621 <mike@perusion.com>
"Even if you're on the right track, you'll get run over if you just
sit there." -- Will Rogers