Changeset 8344

Timestamp:

4 May 2012, 16:48:05 (12 years ago)

Author:

uli

Message:

Make password checking of users more robust.

File:

• main/waeup.kofa/trunk/src/waeup/kofa/authentication.py (modified) (1 diff)

main/waeup.kofa/trunk/src/waeup/kofa/authentication.py

@@ -168 +168 @@
 
     def checkPassword(self, password):
+        if not isinstance(password, basestring):
+            return False
+        if not self.password:
+            # unset/empty passwords do never match
+            return False
         passwordmanager = getUtility(IPasswordManager, 'SSHA')
         return passwordmanager.checkPassword(self.password, password)