From 7ed06f3b0a44fae70ec145535635510252238795 Mon Sep 17 00:00:00 2001 From: Alexandre Emsenhuber Date: Fri, 8 Feb 2013 08:21:29 +0100 Subject: [PATCH] Mention that User::setInternalPassword() accepts null as password string This allows to set an invalid hash preventing the user from logging in. Change-Id: I8869eda42fd902dd26660c63e5f213b63e7e77ef --- includes/User.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/includes/User.php b/includes/User.php index a73414c9d3..65d8628676 100644 --- a/includes/User.php +++ b/includes/User.php @@ -2046,7 +2046,9 @@ class User { /** * Set the password and reset the random token unconditionally. * - * @param $str String New password to set + * @param $str string|null New password to set or null to set an invalid + * password hash meaning that the user will not be able to log in + * through the web interface. */ public function setInternalPassword( $str ) { $this->load(); -- 2.20.1