Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
services
t3o sites
extensions.typo3.org
extensions.typo3.org
Commits
ad6454db
Commit
ad6454db
authored
Sep 02, 2017
by
Thomas Löffler
Browse files
Merge branch 'sec-soap' into 'develop'
[SECURITY] Fix unauthorized SOAP access See merge request
!174
parents
bb47bbbe
0ecc7fc6
Pipeline
#2115
passed with stages
in 1 minute and 26 seconds
Changes
1
Pipelines
2
Hide whitespace changes
Inline
Side-by-side
html/typo3conf/ext/ter/class.tx_ter_helper.php
View file @
ad6454db
...
...
@@ -149,7 +149,7 @@ class tx_ter_helper
// as password strings on typo3.org are not updated ones
if
(
$row
[
'password'
]
!==
$accountData
->
password
&&
!
$objPHPass
->
checkPassword
(
$accountData
->
password
,
$row
[
'password'
]
)
&&
$this
->
ldapValidationSucceeded
(
$accountData
)
)
&&
!
$this
->
ldapValidationSucceeded
(
$accountData
)
)
{
throw
new
tx_ter_exception_unauthorized
(
'Wrong password.'
,
TX_TER_ERROR_GENERAL_WRONGPASSWORD
);
}
...
...
Thomas Löffler
@tomalo.stuttgart
mentioned in issue
#201 (closed)
·
Sep 06, 2017
mentioned in issue
#201 (closed)
mentioned in issue #201
Toggle commit list
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment