alloc
alloc copied to clipboard
Don't allow users to set passwords that are invalid for login
The below code:
https://github.com/cyberitsolutions/alloc/blob/05539b5794e38b212c4b808438fbdbc58783fde8/person/templates/personM.tpl#L39-L43
Allows a user to set a password longer than 32 characters.
But the below code:
https://github.com/cyberitsolutions/alloc/blob/05539b5794e38b212c4b808438fbdbc58783fde8/login/templates/login.tpl#L18
Requires the password on the login form to be a max of 32 characters.
I have tested (accidentally) that I can set a 36-character password successfully, but then fail to log in with it due to the char limit of the HTML field.