[BUGFIX] Mark not set Install Tool password as secure 86/53786/3
authorFrans Saris <franssaris@gmail.com>
Mon, 21 Aug 2017 13:59:35 +0000 (15:59 +0200)
committerFrans Saris <franssaris@gmail.com>
Wed, 23 Aug 2017 07:07:43 +0000 (09:07 +0200)
commitd919fbd244955f73ff45d2d6b28f73454c9a0600
tree66f7e1924fc947e64a364a480188a199b53d450b
parenta3604d2ab836bb872a00cc12da944f2469e983db
[BUGFIX] Mark not set Install Tool password as secure

To completely disable the Install Tool you can just leave the
`installToolPassword` value empty in your LocalConfiguration.
Problem here is that not all password hashing methods can handle an
empty value without giving PHP warnings.

This patch changes the password check in reporting to skip the install
password hashing/check when there is no password.

Releases: master, 8.7
Resolves: #82147
Change-Id: I399a505544203fc40435f8e82b3baa5b6abd0da5
Reviewed-on: https://review.typo3.org/53786
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Frans Saris <franssaris@gmail.com>
Tested-by: Frans Saris <franssaris@gmail.com>
typo3/sysext/install/Classes/Report/SecurityStatusReport.php