* Accept null parameter to User::setPassword() as indicating the password
authorBrion Vibber <brion@users.mediawiki.org>
Wed, 13 Dec 2006 08:59:20 +0000 (08:59 +0000)
committerBrion Vibber <brion@users.mediawiki.org>
Wed, 13 Dec 2006 08:59:20 +0000 (08:59 +0000)
commit295d0bf2956c43e9a46dbc79f9a22273a6eabc3e
treec8dba516a3898e2ce857b6f919ca36b41b3a3204
parent4bdff3636fc087ebbcd703275ffac7b240b162c5
* Accept null parameter to User::setPassword() as indicating the password
  field should be cleared to an unusable state. Login will only be possible
  after the password is reset, for instance by e-mail.
* (bug 6394) Invalidate the password set for "by e-mail" account creations
  to avoid accidental empty password creations.
RELEASE-NOTES
includes/AuthPlugin.php
includes/SpecialUserlogin.php
includes/User.php