samimave / car-pool

Automatically exported from code.google.com/p/car-pool
0 stars 0 forks source link

User can register without entering anything into the registration form on both registration with openid and username and password #45

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Authenticate using a unregistered openid
2. Click register without entering any data into the registration form
3. You are now registered as "" user

1. On registration page for username and password click register without
entering any data
2. You are now registered as "" user.

The only thing stopping someone from registering with no username is if
someone else did it before they did.

Original issue reported on code.google.com by terrasea on 28 Sep 2008 at 12:19

GoogleCodeExporter commented 9 years ago
Fixed the bug by checking to see if the length of those fields is zero or not 
and not
allowing the registration to go any futher if any of the critical ones are.  
Those
critical fields being username and email. Also password if you use the username 
and
password registration page.

Original comment by terrasea on 28 Sep 2008 at 5:37