Changeset 8344 for main/waeup.kofa/trunk

Timestamp:

4 May 2012, 16:48:05 (13 years ago)

Author:

uli

Message:

Make password checking of users more robust.

File:

• main/waeup.kofa/trunk/src/waeup/kofa/authentication.py (modified) (1 diff)

main/waeup.kofa/trunk/src/waeup/kofa/authentication.py

@@ -168 +168 @@
 
     def checkPassword(self, password):
+        if not isinstance(password, basestring):
+            return False
+        if not self.password:
+            # unset/empty passwords do never match
+            return False
         passwordmanager = getUtility(IPasswordManager, 'SSHA')
         return passwordmanager.checkPassword(self.password, password)