Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: register.php -> Line "'{PASSWORD}' => $password," must be removed  (Read 2839 times)

0 Members and 1 Guest are viewing this topic.

Makc666

  • Translator
  • Coppermine addict
  • **
  • Offline Offline
  • Gender: Male
  • Posts: 1614
  • Русский (ISO-8859-1) - Russian - Русский (Windows)
    • Makc's home page

According to this topic -> http://forum.coppermine-gallery.net/index.php/topic,41910.0.html

File:
register.php

Code:
Code: [Select]
                        $template_vars = array(
                         '{SITE_LINK}' => $site_link,
                         '{USER_NAME}' => $user_name,
                         '{PASSWORD}' => $password,
                         '{SITE_NAME}' => $CONFIG['gallery_name'],
                                );

Line:
Code: [Select]
'{PASSWORD}' => $password,
Must be removed for security reasons.

As if now some one will enter {PASSWORD} to any language file into section
Code: [Select]
$lang_register_activated_email = <<<EOTthe user will receive his password's hash in email.
Logged
Pages: [1]   Go Up
 

Page created in 0.024 seconds with 20 queries.