developer.jelix.org is not used any more and exists only for history. Post new tickets on the Github account.
developer.jelix.org n'est plus utilisée, et existe uniquement pour son historique. Postez les nouveaux tickets sur le compte github.

Opened 9 years ago

Closed 9 years ago

#1332 closed bug (fixed)

installWizard: should allow empty password for db profile

Reported by: Julien Owned by: Julien
Priority: normal Milestone: Jelix 1.3 beta 1
Component: jelix:installer Version: trunk
Severity: normal Keywords:
Cc: Blocked By:
Blocking: Documentation needed: no
Hosting Provider: Php version:

Change History (4)

comment:1 Changed 9 years ago by Julien

  • Owner set to Julien
  • Status changed from new to assigned

comment:2 Changed 9 years ago by laurentj

Is there a specific case where password must be empty ?

I don't want to allow empty password, to force to have a minimum of security.

comment:3 Changed 9 years ago by Julien

in my local dev environment, i have a mysql user with no password. I think it's easier/quicker/whatever when developing and when sharing code with others (ooops, put profiles.ini.php under mercurial source control, with my (root, most of the time) password...).

also other installers (prestashop, wordpress, ...) do allow this, so I think we should too.

And for sure, if in production or public environment, you are given a password-less db access, you should change your hosting provider / sysadmin ;)

comment:4 Changed 9 years ago by laurentj

  • Resolution set to fixed
  • review review? deleted
  • Status changed from assigned to closed

I added an option to force the password requirement. By default it is optional. https://bitbucket.org/jelix/jelix-trunk/changeset/7d577938e66c

Note: See TracTickets for help on using tickets.