Browse Source

settings/password: no minimal required characters for OldPassword

If users are added to gogs due a reverse proxy automatically, their password is
set to their initial username. If their username is shorter than 6 characters,
they can never set a password. But since this password is required for some
operations (e.g. repository deletion), they could not use all features of gogs
until now.
tags/v1.2.0-rc1
Christian Dietrich 10 years ago
parent
commit
a883b8d902
1 changed files with 1 additions and 1 deletions
  1. +1
    -1
      modules/auth/user_form.go

+ 1
- 1
modules/auth/user_form.go View File

@@ -107,7 +107,7 @@ func (f *AddEmailForm) Validate(ctx *macaron.Context, errs binding.Errors) bindi
}

type ChangePasswordForm struct {
OldPassword string `form:"old_password" binding:"Required;MinSize(6);MaxSize(255)"`
OldPassword string `form:"old_password" binding:"Required;MinSize(1);MaxSize(255)"`
Password string `form:"password" binding:"Required;MinSize(6);MaxSize(255)"`
Retype string `form:"retype"`
}


Loading…
Cancel
Save