[koha-commits] main Koha release repository branch new/bug_8515 created. v3.08.00-1301-g85c4cd4

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, new/bug_8515 has been created
        at  85c4cd4712026a554817564dcd7fea70a27ad0e1 (commit)

- Log -----------------------------------------------------------------
commit 85c4cd4712026a554817564dcd7fea70a27ad0e1
Author: Owen Leonard <oleonard at myacpl.org>
Date:   Fri Nov 2 12:40:08 2012 -0400

    Bug 8515 - OPAC password change does not obey OpacPasswordChange
    
    The OPAC change password template enforces the OpacPasswordChange
    preference by preventing the form from appearing. However, the
    script doesn't contain any check for OpacPasswordChange so it is
    vulnerable to someone submitting data to it by some other means.
    
    This patch adds a check for OpacPasswordChange to the script and
    revises the template logic in order to show the right warning
    in all circumstances.
    
    To test, turn off OpacPasswordChange and navigate manually to
    opac-passwd.pl. You should see a warning that you can't change
    your password.
    
    Turn on OpacPasswordChange load the change password page and
    save the page to your desktop. Turn off OpacPasswordChange and
    submit a password change via the saved page. Without the patch
    this would result in a password change. After the patch it
    should not.
    
    Signed-off-by: Melia Meggs <melia at test.bywatersolutions.com>
    Signed-off-by: Katrin Fischer <Katrin.Fischer.83 at web.de>
    Confirmed bug and made sure patch fixes it.
    Passes all tests and perlcritic.
    Signed-off-by: Jared Camins-Esakov <jcamins at cpbibliography.com>

-----------------------------------------------------------------------


hooks/post-receive
-- 
main Koha release repository