[BUGFIX] Mark not set Install Tool password as secure 57/53757/5
authorFrans Saris <franssaris@gmail.com>
Mon, 21 Aug 2017 13:59:35 +0000 (15:59 +0200)
committerBenni Mack <benni@typo3.org>
Tue, 22 Aug 2017 20:24:37 +0000 (22:24 +0200)
commit2798e522d73d6e338b124c2b1adf728b067146eb
tree530b5891ea925359dd62114471e54e4d35510025
parent5ae3fc87edc6967b3f139f9895d42e6d8c3a3e14
[BUGFIX] Mark not set Install Tool password as secure

To completely disable the Install Tool you can just leave the
`installToolPassword` value empty in your LocalConfiguration.
Problem here is that not all password hashing methods can handle an
empty value without giving PHP warnings.

This patch changes the password check in reporting to skip the install
password hashing/check when there is no password.

Releases: master, 8.7
Resolves: #82147
Change-Id: I399a505544203fc40435f8e82b3baa5b6abd0da5
Reviewed-on: https://review.typo3.org/53757
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Wolfgang Klinger <wolfgang@wazum.com>
Reviewed-by: Joerg Boesche <typo3@joergboesche.de>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Sebastian Fischer <typo3@evoweb.de>
Reviewed-by: Benni Mack <benni@typo3.org>
Tested-by: Benni Mack <benni@typo3.org>
typo3/sysext/install/Classes/Report/SecurityStatusReport.php