Merge pull request #21089 from atm-quentin/FIX_empty_password

FIX If the password does not match the rules, Dolibarr creates a user without a password
This commit is contained in:
Laurent Destailleur 2022-06-01 19:35:41 +02:00 committed by GitHub
commit 11ede876bb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -333,10 +333,17 @@ if (empty($reshook)) {
$id = $object->create($user); $id = $object->create($user);
if ($id > 0) { if ($id > 0) {
$resPass = 0;
if (GETPOST('password', 'none')) { if (GETPOST('password', 'none')) {
$object->setPassword($user, GETPOST('password', 'none')); $resPass = $object->setPassword($user, GETPOST('password', 'none'));
} }
if (!empty($conf->categorie->enabled)) { if ($resPass < 0) {
$langs->load("errors");
$db->rollback();
setEventMessages($object->error, $object->errors, 'errors');
$action = "create"; // Go back to create page
} else {
if (! empty($conf->categorie->enabled)) {
// Categories association // Categories association
$usercats = GETPOST('usercats', 'array'); $usercats = GETPOST('usercats', 'array');
$object->setCategories($usercats); $object->setCategories($usercats);
@ -345,6 +352,7 @@ if (empty($reshook)) {
header("Location: ".$_SERVER['PHP_SELF'].'?id='.$id); header("Location: ".$_SERVER['PHP_SELF'].'?id='.$id);
exit; exit;
}
} else { } else {
$langs->load("errors"); $langs->load("errors");
$db->rollback(); $db->rollback();