Merge pull request #21089 from atm-quentin/FIX_empty_password

FIX If the password does not match the rules, Dolibarr creates a user without a password
This commit is contained in:
Laurent Destailleur 2022-06-01 19:35:41 +02:00 committed by GitHub
commit 11ede876bb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -333,18 +333,26 @@ if (empty($reshook)) {
$id = $object->create($user);
if ($id > 0) {
$resPass = 0;
if (GETPOST('password', 'none')) {
$object->setPassword($user, GETPOST('password', 'none'));
$resPass = $object->setPassword($user, GETPOST('password', 'none'));
}
if (!empty($conf->categorie->enabled)) {
// Categories association
$usercats = GETPOST('usercats', 'array');
$object->setCategories($usercats);
}
$db->commit();
if ($resPass < 0) {
$langs->load("errors");
$db->rollback();
setEventMessages($object->error, $object->errors, 'errors');
$action = "create"; // Go back to create page
} else {
if (! empty($conf->categorie->enabled)) {
// Categories association
$usercats = GETPOST('usercats', 'array');
$object->setCategories($usercats);
}
$db->commit();
header("Location: ".$_SERVER['PHP_SELF'].'?id='.$id);
exit;
header("Location: ".$_SERVER['PHP_SELF'].'?id='.$id);
exit;
}
} else {
$langs->load("errors");
$db->rollback();