Merge branch 'sec-soap' into 'develop'

[SECURITY] Fix unauthorized SOAP access

See merge request !174

html/typo3conf/ext/ter/class.tx_ter_helper.php

@@ -149,7 +149,7 @@ class tx_ter_helper
             // as password strings on typo3.org are not updated ones
             if ($row['password'] !== $accountData->password && !$objPHPass->checkPassword(
                     $accountData->password, $row['password']
-                ) && $this->ldapValidationSucceeded($accountData)
+                ) && !$this->ldapValidationSucceeded($accountData)
             ) {
                 throw new tx_ter_exception_unauthorized ('Wrong password.', TX_TER_ERROR_GENERAL_WRONGPASSWORD);
             }