From f6eb10f6e5bdbb867f1ca827135bc987b3ac7626 Mon Sep 17 00:00:00 2001
From: Nicolas Streng <nicolas@nicolasstr.eu>
Date: Sat, 5 Dec 2020 21:10:57 +0100
Subject: [PATCH] Fix #15676 Hide Password when importing from LDAP

Refers to Issue #15676
---
 htdocs/user/card.php | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/htdocs/user/card.php b/htdocs/user/card.php
index 8934d8d87ec..61a4405fbfa 100644
--- a/htdocs/user/card.php
+++ b/htdocs/user/card.php
@@ -737,10 +737,12 @@ if ($action == 'create' || $action == 'adduserldap')
 					$label = '';
 					foreach ($required_fields as $value)
 					{
-						if ($value)
-						{
-							$label .= $value."=".$ldapuser[$value]." ";
-						}
+						if ($value === $conf->global->LDAP_FIELD_PASSWORD || $value === $conf->global->LDAP_FIELD_PASSWORD_CRYPTED)
+ 						{
+ 							$label .= $value."=******* ";
+ 						} else if ($value) {
+ 							$label .= $value."=".$ldapuser[$value]." ";
+ 						}
 					}
 					$liste[$key] = $label;
 				}