is not used any more and exists only for history. Post new tickets on the Github account. n'est plus utilisée, et existe uniquement pour son historique. Postez les nouveaux tickets sur le compte github.

Opened 10 years ago

Closed 10 years ago

#1332 closed bug (fixed)

installWizard: should allow empty password for db profile

Reported by: Julien Owned by: Julien
Priority: normal Milestone: Jelix 1.3 beta 1
Component: jelix:installer Version: trunk
Severity: normal Keywords:
Cc: Blocked By:
Blocking: Documentation needed: no
Hosting Provider: Php version:

Change History (4)

comment:1 Changed 10 years ago by Julien

  • Owner set to Julien
  • Status changed from new to assigned

comment:2 Changed 10 years ago by laurentj

Is there a specific case where password must be empty ?

I don't want to allow empty password, to force to have a minimum of security.

comment:3 Changed 10 years ago by Julien

in my local dev environment, i have a mysql user with no password. I think it's easier/quicker/whatever when developing and when sharing code with others (ooops, put profiles.ini.php under mercurial source control, with my (root, most of the time) password...).

also other installers (prestashop, wordpress, ...) do allow this, so I think we should too.

And for sure, if in production or public environment, you are given a password-less db access, you should change your hosting provider / sysadmin ;)

comment:4 Changed 10 years ago by laurentj

  • Resolution set to fixed
  • review review? deleted
  • Status changed from assigned to closed

I added an option to force the password requirement. By default it is optional.

Note: See TracTickets for help on using tickets.