Question

My Version: TWiki20030201.tar.gz

Ok.. I enabled authentication in my TWiki and a bug in the bin/register script causes that the password shows up in the user page as

• password A : secret
• password B : secret

The problem is:

        for( $x = 0; $x < $formLen; $x++ ) {
            $name = $formDataName[$x];
            $value = $formDataValue[$x];
            $value =~ s/[\n\r]/ /go;
            if( ! (    ( $name eq "Wiki Name" )
                    || ( $name eq "Password" )
                    || ( $name eq "Confirm" ) ) ) {
                $row = $repeat;
                $row =~ s/%KEY%/$name/go;
                $row =~ s/%VALUE%/$value/go;
                $before .= $row;
            }

        for( $x = 0; $x < $formLen; $x++ ) {
            $name = $formDataName[$x];
            $value = $formDataValue[$x];
            $value =~ s/[\n\r]/ /go;
            if( ! (    ( $name eq "Wiki Name" )
                    || ( $name eq "password A" )
                    || ( $name eq "password B" )) ) {
                $row = $repeat;
                $row =~ s/%KEY%/$name/go;
                $row =~ s/%VALUE%/$value/go;
                $before .= $row;
            }

-- BastianHoyer - 12 Mar 2003

Answer

It is hard to believe that "password A" and "password B" bullets are showing up in the user home pages. Unless you changed the registration page to pass these names along. The TWikiRegistrationPub topic in the distribution passes along laues of name "Password" and "Confirm". You do not need to change the code, fix the registration topic to have these named fields:

Password: <input type="password" name="Twk1Password" size="40" value="" />
Retype password: <input type="password" name="Twk1Confirm" size="40" value="" />

-- PeterThoeny - 14 Mar 2003