Opened 8 years ago

Last modified 4 years ago

#6775 assigned defect

UserManagerPlugin can auto import bad (empty) usernames

Reported by: lkraav Owned by: Ryan J Ollos
Priority: normal Component: UserManagerPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11


i ran into a case where i had an empty line inside htpasswd file. this resulted in a user being listed in admin panel with all fields seemingly empty. actually the username consists of a single linefeed, which is visible in page source.

now, pressing Import All for UserManagerPlugin imports this empty user and it is very difficult to get rid of it. because none of Remove or Delete buttons are unable to remove this user, direct access to database is needed to fix it.

sqlite> delete from session where last_visit='1267208488';
sqlite> delete from session_attribute where length(sid) < 3;

UserManagerPlugin should probably check for username sanity before importing.

Attachments (0)

Change History (1)

comment:1 Changed 4 years ago by Ryan J Ollos

Owner: changed from Catalin BALAN to Ryan J Ollos
Status: newassigned

Modify Ticket

Change Properties
Set your email in Preferences
as assigned The owner will remain Ryan J Ollos.

Add Comment

E-mail address and name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.