View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0000225Main CAcert Websiteaccount administrationpublic2006-05-05 20:202013-01-14 08:17
ReporterbluecAssigned To 
PriorityhighSeveritymajorReproducibilityalways
Status closedResolutionduplicate 
Fixed in Version2006 
Summary0000225: broken change password function in admin interface
DescriptionCurrently it is not possible to use the change password function (account.php?id=44). It always results in "No such user found".
Additional InformationThe problem is that in account/44.php in line 33 the value for <?=$_POST['userid']?> is empty what results in

<input type="hidden" name="userid" value="">

I can't find a reason for that behaviour. Is it possible that there have been changes to the code lately that haven't been added to the current tarball?


A possible workaround is to save a local copy of 44.php and add the userid manually.
TagsNo tags attached.
Reviewed by
Test Instructions

Relationships

has duplicate 0000248 closedduane password reset does not work in admin mode 
has duplicate 0000237 closedduane problem with passwords 

Activities

bluec

2006-05-07 05:02

manager   ~0000217

In includes/account.php there is

    if($id == 44)
    {
          [...]
           if($row['email'] == "")
                 $id = 42;
           else
                 $_POST['email'] = $row['email'];
    }

As $id is not set to 42 there seems be a non empty value for $row['email']. As the tarball doesn't incluse the files from /page/ I cannot see why $_POST['email'] and $_POST['userid'] are dropped and not displayed on the website.

The result is, that passwords cannot be changed anymore.

duane

2006-08-08 03:55

developer   ~0000324

Bug 0000248 describes the best fix for this bug, closing this report as a result

Issue History

Date Modified Username Field Change
2006-05-05 20:20 bluec New Issue
2006-05-06 18:22 bluec Relationship added related to 0000226
2006-05-07 05:02 bluec Note Added: 0000217
2006-06-01 03:47 bluec Relationship added has duplicate 0000248
2006-06-02 07:48 homer Relationship added related to 0000237
2006-06-02 07:53 homer Relationship replaced has duplicate 0000237
2006-08-08 03:55 duane Status new => closed
2006-08-08 03:55 duane Note Added: 0000324
2006-08-08 03:55 duane Resolution open => duplicate
2006-08-08 03:55 duane Fixed in Version => production
2006-08-14 17:17 duane Relationship deleted related to 0000226
2013-01-14 08:17 Werner Dworak Fixed in Version => 2006