From 36f2e6d58093e8bc3eebf5db1cc2dcb8f467df06 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@users.sourceforge.net>
Date: Thu, 26 Apr 2007 01:00:27 +0000
Subject: [PATCH] =?UTF-8?q?S=E9cu:=20Le=20mot=20de=20passe=20ne=20doit=20p?=
 =?UTF-8?q?as=20apparaitre=20meme=20crypt=E9=20sauf=20pour=20admin=20qui?=
 =?UTF-8?q?=20peut=20apparaitre=20crypt=E9.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 htdocs/html.form.class.php | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/htdocs/html.form.class.php b/htdocs/html.form.class.php
index d87acd9d083..89308228d40 100644
--- a/htdocs/html.form.class.php
+++ b/htdocs/html.form.class.php
@@ -2915,7 +2915,7 @@ class Form
 	}
 
 
-	function show_ldap_content($result,$level,$count,$var)
+	function show_ldap_content($result,$level,$count,$var,$hide=0)
 	{
 		global $bc, $conf;
 		
@@ -2936,18 +2936,21 @@ class Form
 			
 			if (is_array($val)) 
 			{
+				$hide=0;
 				if (! is_numeric($key)) 
 				{
 					$var=!$var;
 					print '<tr '.$bc[$var].'><td>';
 					print $key;
 					print '</td><td>';
+					if (strtolower($key) == 'userpassword') $hide=1;
 				}
-				$this->show_ldap_content($val,$level+1,$count,$var);
+				$this->show_ldap_content($val,$level+1,$count,$var,$hide);
 			}
 			else
 			{
-				print utf8_decode("$val");
+				if ($hide) print eregi_replace('.','*',utf8_decode("$val"));
+				else print utf8_decode($val);
 				print '</td></tr>';
 			}
 		}