Closed Bug 290564 Opened 20 years ago Closed 20 years ago

Users can log in when disabled (manually, or not confirmed yet)

Categories

(addons.mozilla.org Graveyard :: Developer Pages, defect)

x86
Linux
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: cso, Assigned: cso)

Details

Attachments

(1 file)

<morgamic> Colin, CTho|zzz: when you guys have time, could you look at account
creation -- it's not requiring confirmation

The SQL for the login script just checks the username and the password. It
doesn't check the fact that the account is not disbaled (This could be done
manually, or it could be the fact its a new account).
Attached patch Patch v1Splinter Review
Redirect to the login form with a different message if the user is not enabled.
Assignee: Bugzilla-alanjstrBugs → colin.ogilvie
Status: NEW → ASSIGNED
Attachment #180872 - Flags: first-review?(mike.morgan)
Comment on attachment 180872 [details] [diff] [review]
Patch v1

Tested this; does exactly what we need it to do.  Landed.  Thanks Colin.
Attachment #180872 - Flags: first-review?(mike.morgan) → first-review+
Marking fixed per comment 2
Status: ASSIGNED → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: