lhardie

Results 4 comments of lhardie

v2.0 -> v3.0: handling of empty passwords has changed?

This is my personal account (I am engagit), and I have done some further testing that has me very concerned. There is a large security hole present in my application,...

v2.0 -> v3.0: handling of empty passwords has changed?

Before anyone puts a bunch of time into this, I am attempting to reproduce this with a build of Symfony Standard from scratch, and so far cannot replicate. I will...

v2.0 -> v3.0: handling of empty passwords has changed?

So far I have been unable to reproduce this a new installation of Symfony. While this seems to point to my app code being the culprit, I made no code...

v2.0 -> v3.0: handling of empty passwords has changed?

I found it. Before upgrading Symfony and the FR3D Ldap Bundle, we were using FR3D v2.0.0-ALPHA2. In that version the LDAP Authentication Provider checks for an empty password with the...