Opened 7 years ago

Last modified 3 years ago

#6775 assigned defect

UserManagerPlugin can auto import bad (empty) usernames

Reported by: lkraav Owned by: rjollos
Priority: normal Component: UserManagerPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11


i ran into a case where i had an empty line inside htpasswd file. this resulted in a user being listed in admin panel with all fields seemingly empty. actually the username consists of a single linefeed, which is visible in page source.

now, pressing Import All for UserManagerPlugin imports this empty user and it is very difficult to get rid of it. because none of Remove or Delete buttons are unable to remove this user, direct access to database is needed to fix it.

sqlite> delete from session where last_visit='1267208488';
sqlite> delete from session_attribute where length(sid) < 3;

UserManagerPlugin should probably check for username sanity before importing.

Attachments (0)

Change History (1)

comment:1 Changed 3 years ago by rjollos

  • Owner changed from cbalan to rjollos
  • Status changed from new to assigned

Add Comment

Modify Ticket

as assigned The owner will remain rjollos.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.