Author Topic: Required fields are not required in the registration form  (Read 1241 times)

Ventsi Genchev

  • Jr. Member
  • **
  • Posts: 292
    • Audio Store
Re: Required fields are not required in the registration form
« Reply #15 on: May 16, 2019, 16:00:36 pm »
No I am not.
Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English

StefanSTS

  • Global Moderator
  • Jr. Member
  • *
  • Posts: 460
  • VirtueMart Version: VM 4.2 on Joomla 4.5
Re: Required fields are not required in the registration form
« Reply #16 on: May 16, 2019, 16:30:43 pm »
Actually the minimum password length in Joomla is 4 chars anyway, so there is no chance to register without a password.
That would throw an error.

The only thing you can do is order as a guest without registering and therefore no password.

--
Stefan Schumacher
www.jooglies.com - VirtueMart Invoice Layouts

Please use only stable versions with even numbers for your live shop! Use Alpha versions only if you know what risk you are taking.

Ventsi Genchev

  • Jr. Member
  • **
  • Posts: 292
    • Audio Store
Re: Required fields are not required in the registration form
« Reply #17 on: May 16, 2019, 16:45:19 pm »
Please allow me to disagree with you:

Missing password will pass because Joomla! allows you to generate random password when the input password during registration is empty.
Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English

StefanSTS

  • Global Moderator
  • Jr. Member
  • *
  • Posts: 460
  • VirtueMart Version: VM 4.2 on Joomla 4.5
Re: Required fields are not required in the registration form
« Reply #18 on: May 16, 2019, 17:29:31 pm »
Ok,

but then you actually have a password. So if you stop that via JS that should be fine.

If someone bypasses the JS "maliciously" that someone will have an unknown password.
If you don't know your Joomla password you can reset it anytime via the J login.

So  I actually don't see more than an theoretical problem, that is also no security issue.

--
Stefan Schumacher
www.jooglies.com - VirtueMart Invoice Layouts

Please use only stable versions with even numbers for your live shop! Use Alpha versions only if you know what risk you are taking.

Ventsi Genchev

  • Jr. Member
  • **
  • Posts: 292
    • Audio Store
Re: Required fields are not required in the registration form
« Reply #19 on: May 16, 2019, 18:22:55 pm »
OK thank you.
This is your decision.
Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English