I'm not sure if this is new to anybody... but I've discovered that it's possible to sign up for a new account without entering a password!

Has anybody else encountered this problem?

Terence Watts

yes...because Jcow did not check password is empty or not..it is a bug..

You can overcome this by this code. go to memeber.php and locate singup() function.

[code]
if (!$_POST['email'] || !$_POST['fullname'] || !$_POST['username']) {
$errors[] = t('Please fill in all the required blanks');
}
[/code]
should be change to
[code]
if (!$_POST['email'] || !$_POST['fullname'] || !$_POST['username'] || !$_POST['password']) {
$errors[] = t('Please fill in all the required blanks');
}
[/code]

Thank you very much - I'll get on to that later today!

I've searched everywhere for the file 'member.php' with no luck at all... which directory would I expect to find it in?

You can find that on

modules/member/member.php

Doh! Thank you very much :-)

DISASTER! The sign upn page just disappears now - I reinstated the code but it's still not working... and I have no idea how to sort that out.

Help!!!

Terence

OK - panic over... problem sorted.

[quote=monemran]yes...because Jcow did not check password is empty or not..it is a bug..

You can overcome this by this code. go to memeber.php and locate singup() function.

[code]
if (!$_POST['email'] || !$_POST['fullname'] || !$_POST['username']) {
$errors[] = t('Please fill in all the required blanks');
}
[/code]
should be change to
[code]
if (!$_POST['email'] || !$_POST['fullname'] || !$_POST['username'] || !$_POST['password']) {
$errors[] = t('Please fill in all the required blanks');
}
[/code][/quote]

This omission is still present in the version 4.2.1, but I see there has been a modification of the user files. The file I modified to correct the issue was:

jcow/includes/libs/member.module.php Around line 610

[code] if (!$_POST['email'] || !$_POST['fullname'] || !$_POST['username'] || !$_POST['password']) {

            $errors[] = t('Please fill in all the required blanks');[/code]

Same fix as monemram explained in original post.

LOL panic button :)

LOL panic button :)