Password confirmation is ignored while updating the password

NAJU-Sachsen / NAJU-Adebar

Management tool used by the NAJU Sachsen to keep track of volunteers and the like.

http://naju-sachsen.de

GNU General Public License v3.0

0 stars 0 forks source link

Open rbergm opened 1 year ago

rbergm commented 1 year ago

When a user updates its password, 3 input fields are required:

. the current password . the new password . the new password again to prevent typos

However, the second version of the new password is never actually compared to the first version, thereby completely skipping confirmation.