User Edit bug when saving user data and/or changing password

[SteP[IT]]

In my setup (J 2.5.8 - VM 2.0.16c), I have found some strange behaviour regarding password fields, when saving user data by the Edit User Account page.

Saving account data does not alert user that his password is/is not changed, as hereafter detailed:

• saving user account without filling any of the two password fields: user is NOT alerted that he is not changing his password when leaving password fields blank
• saving user account when filling only one of the two password fields: user is NOT alerted that he is trying to wrongly change the password, and that the result is an unchanged password.
• saving user acconut when correctly filling both password fields with a correct password: user in NOT alerted that his password has been correctly changed

btw: alert message is correctly showed ONLY when saving a user account and the two password fields have been filled with different passwords

Could you please verify that and address a patch asap?

Thank you in advance

[Milbo]

I wouldnt call this a bug.

Often it is so that one password is already prefilled. To sent in this case a message would lead to a unneeded message. To avoid this message users have to empty the password field.
We could add a message for a succesful password change. But I am wondering that joomla is not doing it, because we dont do it. We call the joomla method and give it the data.

[SteP[IT]]

I haven't checked the Joomla password change directly, because I need it only for VM users... but is strange that, as already told, the alert message appears only when introducing different password in each one of the two fields.
May be adding a js to further check password fields difference/inconsistency could help user to receive feedback on this situation?

[jenkinhill]

Try including <jdoc:include type="message" /> in your Joomla template header to allow Joomla to report front end errors.

[SteP[IT]]

Try including <jdoc:include type="message" /> in your Joomla template header to allow Joomla to report front end errors.

This is not my case: I already get a error message when (and only when) inserting two different passwords in password fields (in any case I have tried it (just to be sure) but it doesn't get the right results)

[SteP[IT]]

To be more exact, when saving user form with empty password fields, or only one of them filled, I see a message saying "User data stored"... in my opinion, this message let user believe that also password has been changed, even in the case he filled none or only one of the two pwd fields. And this is wrong.