Feeling Lucky
?
[#18734] - a username can be the same as its password
- Closed
- 21 Nov 2017
- Medium
- Build: staging
- # 18734
Steps to reproduce the issue
Create a user, its username can be exactly the same as the password
like
username: admin
password: admin
Expected result
That Joomla holds itself to better security/validation than this and doesn't allow this in the future. Why on earth would we allow this, I cannot see any justification.
Actual result
admin/admin is valid.
user/user is valid.
| Labels |
Added:
?
|
||
franz-wohlkoenig
- | Category | ⇒ | Authentication |
| Status | New | ⇒ | Discussion |
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-11-21 06:25:40 |
| Closed_By | ⇒ | franz-wohlkoenig |
| Closed_By | franz-wohlkoenig | ⇒ | joomla-cms-bot |
joomla-cms-bot
- comment
- 21 Nov 2017
Set to "closed" on behalf of @franz-wohlkoenig by The JTracker Application at issues.joomla.org/joomla-cms/18734
as always - pull requests welcome