Required fields are not required in the registration form

Started by Ventsi Genchev, May 05, 2019, 11:52:00 AM

Previous topic - Next topic

Ventsi Genchev

Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English

StefanSTS

Actually the minimum password length in Joomla is 4 chars anyway, so there is no chance to register without a password.
That would throw an error.

The only thing you can do is order as a guest without registering and therefore no password.

--
Stefan Schumacher
www.jooglies.com - VirtueMart Invoice Layouts

Please use only stable versions with even numbers for your live shop! Use Alpha versions only if you know what risk you are taking.

Ventsi Genchev

Please allow me to disagree with you:

Missing password will pass because Joomla! allows you to generate random password when the input password during registration is empty.
Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English

StefanSTS

Ok,

but then you actually have a password. So if you stop that via JS that should be fine.

If someone bypasses the JS "maliciously" that someone will have an unknown password.
If you don't know your Joomla password you can reset it anytime via the J login.

So  I actually don't see more than an theoretical problem, that is also no security issue.

--
Stefan Schumacher
www.jooglies.com - VirtueMart Invoice Layouts

Please use only stable versions with even numbers for your live shop! Use Alpha versions only if you know what risk you are taking.

Ventsi Genchev

Audio Store:
https://vsystem.bg - Bulgarian language
https://vsystem.bg/en - English