Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
  • typo3 typo3
  • Project information
    • Project information
    • Activity
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Analytics
    • Analytics
    • CI/CD
    • Insights
    • Repository
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • typo3typo3
  • typo3typo3
  • Repository
Switch branch/tag
  • typo3
  • typo3
  • sysext
  • install
  • Classes
  • Report
  • SecurityStatusReport.php
Find file BlameHistoryPermalink
  • Frans Saris's avatar
    [BUGFIX] Mark not set Install Tool password as secure · 2798e522
    Frans Saris authored Aug 21, 2017 and Benni Mack's avatar Benni Mack committed Aug 22, 2017
    To completely disable the Install Tool you can just leave the 
    `installToolPassword` value empty in your LocalConfiguration. 
    Problem here is that not all password hashing methods can handle an 
    empty value without giving PHP warnings.
    
    This patch changes the password check in reporting to skip the install 
    password hashing/check when there is no password.
    
    Releases: master, 8.7
    Resolves: #82147
    Change-Id: I399a505544203fc40435f8e82b3baa5b6abd0da5
    Reviewed-on: https://review.typo3.org/53757
    
    
    Reviewed-by: Wouter Wolters's avatarWouter Wolters <typo3@wouterwolters.nl>
    Tested-by: default avatarTYPO3com <no-reply@typo3.com>
    Reviewed-by: default avatarWolfgang Klinger <wolfgang@wazum.com>
    Reviewed-by: Jörg Bösche's avatarJoerg Boesche <typo3@joergboesche.de>
    Tested-by: Christian Kuhn's avatarChristian Kuhn <lolli@schwarzbu.ch>
    Reviewed-by: Sebastian Fischer's avatarSebastian Fischer <typo3@evoweb.de>
    Reviewed-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
    Tested-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
    2798e522