Bug 11842 - Password protection enabled even if password not confirmed
: Password protection enabled even if password not confirmed
Status: CLOSED FIXED
Product: Logitech Media Server
Classification: Unclassified
Component: Web Interface
: 7.4.0
: PC Windows XP
: P3 normal (vote)
: 7.3.3
Assigned To: Michael Herger
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-04-18 02:41 UTC by Jim McAtee
Modified: 2009-06-17 09:37 UTC (History)
1 user (show)

See Also:
Category: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jim McAtee 2009-04-18 02:41:55 UTC
If you attempt to enable password protection and the password and confirm password don't match then security is still enabled, but you end up with a blank password.

An unholy mess ensues: The error screen in Settings is then displayed with no formatting.  If you have the Default skin open in another tab or window then you immediately start getting password prompts.  You'll probably have no idea that while the username was set and that the password is now an empty string.

There needs to be some server-side validation done and password protection should be enabled and username changed only when the passwords match.
Comment 1 James Richardson 2009-04-18 11:25:20 UTC
Michael: I have seen this too in 7.3.3, would this be yours to fix?
Comment 2 Michael Herger 2009-04-18 11:48:36 UTC
(In reply to comment #1)
> Michael: I have seen this too in 7.3.3, would this be yours to fix?

James - what did you see too? The password being enabled though they don't match, or the popups?one is a feature, one would be a bug ;-).
Comment 3 Michael Herger 2009-04-20 01:27:25 UTC
change 26104 - don't enable authentication if passwords didn't match.

Jim/James - the authentication windows popping up are to be expected if authentication is enabled. It's caused even if you don't reload the page by the ajaxy background requests.
Comment 4 Anoop Mehta 2009-04-23 11:56:33 UTC
Verified fix in SC 7.3.3 r26187
Comment 5 James Richardson 2009-06-17 09:37:25 UTC
This bug has been fixed in the 7.3.3 release version of SqueezeCenter!

If you haven't already. please download the new version from http://www.logitechsqueezebox.com/support/download-squeezecenter.html 

If you are still experiencing this problem, feel free to reopen the bug with your new comments and we'll have another look.