BUG
Users can set their password to an empty space. This is ofcourse very insecure and should be disallowed.
FIX
in register.asp change line 101 to
if Trim(Request.Form("Password")) = "" then
Err_Msg = Err_Msg & "<li>You must choose a Password</li>"
end if
and line 199 to
strSql = strSql & ", " & "'" & ChkString(Trim(Request.Form("Password")),"password") & "'"
in pop_profile.asp change line 776 and 970 to:
if Trim(Request.Form("Password")) = "" then
Err_Msg = Err_Msg & "<li>You must choose a Password</li>"
end if
and line 841 to
strSql = strSql & " SET M_PASSWORD = '" & ChkString(Trim(Request.Form("Password")),"") & "', "
and line 1023 to
strSql = strSql & ", M_PASSWORD = '" & ChkString(Trim(Request.Form("Password")),"") & "'"
Pierre
Forum Locked
Topic Locked
Posted - 06 February 2001 : 11:29:17
