[BUGFIX] Generate different password hash for 1st BE User & Install Tool 13/41913/2
authorGeorg Ringer <georg.ringer@gmail.com>
Fri, 24 Jul 2015 04:45:08 +0000 (06:45 +0200)
committerMarkus Klein <markus.klein@typo3.org>
Fri, 24 Jul 2015 10:00:06 +0000 (12:00 +0200)
The install process must generate different password hashes for the same
password which is used for the backend user and the Install Tool.

Change-Id: I4c7b15435473948909bdf94cbd7f4a15fc8ff353
Resolves: #68319
Releases: master
Reviewed-on: http://review.typo3.org/41913
Reviewed-by: Daniel Goerz <ervaude@gmail.com>
Reviewed-by: Susanne Moog <typo3@susannemoog.de>
Tested-by: Susanne Moog <typo3@susannemoog.de>
Reviewed-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Markus Klein <markus.klein@typo3.org>
typo3/sysext/install/Classes/Controller/Action/Step/DatabaseData.php

index 7774cb6..db6ef32 100644 (file)
@@ -55,10 +55,9 @@ class DatabaseData extends AbstractStepAction {
                $this->importDatabaseData();
 
                // Insert admin user
-               $hashedPassword = $this->getHashedPassword($password);
                $adminUserFields = array(
                        'username' => $username,
-                       'password' => $hashedPassword,
+                       'password' => $this->getHashedPassword($password),
                        'admin' => 1,
                        'tstamp' => $GLOBALS['EXEC_TIME'],
                        'crdate' => $GLOBALS['EXEC_TIME']
@@ -66,7 +65,7 @@ class DatabaseData extends AbstractStepAction {
                $this->getDatabaseConnection()->exec_INSERTquery('be_users', $adminUserFields);
 
                // Set password as install tool password
-               $configurationManager->setLocalConfigurationValueByPath('BE/installToolPassword', $hashedPassword);
+               $configurationManager->setLocalConfigurationValueByPath('BE/installToolPassword', $this->getHashedPassword($password));
 
                return $result;
        }