Package: python-moinmoin
Version: 1.5.3-1.2etch1
Severity: normal

A user has reported a problem with the "Lost Password" procedure in
DebianWiki. http://lists.debian.org/debian-www/2008/03/msg00136.html 

When a user wants to recover his lost password, (s)he goes to
http://wiki.debian.org/UserPreferences and asks for it's password by
email.

The email send looks like :
> Somebody has requested to submit your account data to this email
> address.
> 
> If you lost your password, please use the data below and just enter
> the
> password AS SHOWN into the wiki's password form field (use copy and
> paste
> for that).
> 
> After successfully logging in, it is of course a good idea to set a
> new and known password.
> 
> Login Name: FranklinPiat
> 
> Login Password: {SHA}000000000000000000000000000=
> 
> Login URL: http://wiki.debian.org/UserPreferences

The URL should actually read (depending on i18n) :
http://wiki.debian.org/UserPreferences?action=login

The problem could be reproduced on French and English versions.

Debian/Testing system isn't affected (moinmoin 1.5.8).
I've tried to locate the problem on my system (1.5.8) . It seems to lie
in /usr/share/python-support/python-moinmoin/MoinMoin/user.py :
python-moinmoin 1.5.3-1.2etch1
> text = '\n' + _("""\
> Login Name: %s
> 
> Login Password: %s
> 
> Login URL: %s/%s
> """, formatted=False) % (
>                         self.name, self.enc_password, 
> self._request.getBaseURL(), getSysPage(self._request, 
> 'UserPreferences').page_name)

python-moinmoin 1.5.8
>         text = '\n' + _("""\
> Login Name: %s
> 
> Login Password: %s
> 
> Login URL: %s/%s?action=login  
> """, formatted=False) % (
>                         self.name, self.enc_password,
> self._request.getBaseURL(), getSysPage(self._request,
> 'UserPreferences').page_name)

I guess the i18n pages should be updated too.

Franklin




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to