Changeset 1047

Show
Ignore:
Timestamp:
07/20/06 00:28:50 (2 years ago)
Author:
mgood
Message:

AccountManagerPlugin:

skip password test if either "user" or "password" values from login form are missing (fixes #370)

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • accountmanagerplugin/0.9/acct_mgr/web_ui.py

    r1045 r1047  
    198198    def _remote_user(self, req): 
    199199        user = req.args.get('user') 
    200         if AccountManager(self.env).check_password(user, 
    201                 req.args.get('password')): 
     200        password = req.args.get('password') 
     201        if not user or not password: 
     202            return None 
     203        if AccountManager(self.env).check_password(user, password): 
    202204            return user 
    203205        return None 

  • accountmanagerplugin/trunk/acct_mgr/web_ui.py

    r1045 r1047  
    198198    def _remote_user(self, req): 
    199199        user = req.args.get('user') 
    200         if AccountManager(self.env).check_password(user, 
    201                 req.args.get('password')): 
     200        password = req.args.get('password') 
     201        if not user or not password: 
     202            return None 
     203        if AccountManager(self.env).check_password(user, password): 
    202204            return user 
    203205        return None