* Both the password submit and hook_user_insert insert records
* The one from hook_user_insert is double hashed cause pass is already hashed at that stage
* Need to include the file that contains the hashing function

CommentFileSizeAuthor
password_policy_double_insert.patch1.75 KBhefox

Comments

erikwebb’s picture

erikwebb commented

Should we be trimming the password? If there is a leading or trailing space, won't that make our stored password hash different than the main Drupal table's?

coltrane’s picture

coltrane
he/him
commented
Status: Needs review » Reviewed & tested by the community

Drupal's user_save() already trims the password so leading or trailing spaces aren't saved for passwords (they're also trimmed on login so it doesn't matter).

Patch looks good to me. RTBC

erikwebb’s picture

erikwebb commented
Status: Reviewed & tested by the community » Fixed

Fixed. Thanks!

http://drupalcode.org/project/password_policy.git/commit/78d798d

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.