3.0.x: ce353e7 bug #3674 allow users creation with disabled password

2009-10-20 15:09:51 +02:00 · 2009-10-20 15:09:51 +02:00 · 87b792b2b6
parent 7d9cb654b1
commit 87b792b2b6
1 changed files with 1 additions and 1 deletions
--- a/C4/Members.pm
+++ b/C4/Members.pm
@ -680,7 +680,7 @@ Returns the borrowernumber
 sub AddMember {
    my (%data) = @_;
    my $dbh = C4::Context->dbh;
-    $data{'userid'} = '' unless $data{'password'};
+    $data{'password'} = '!' if (not $data{'password'} and $data{'userid'});
    $data{'password'} = md5_base64( $data{'password'} ) if $data{'password'};
 	$data{'borrowernumber'}=InsertInTable("borrowers",\%data);	
    # mysql_insertid is probably bad.  not necessarily accurate and mysql-specific at best.