[Zope] Re: Major security flaw in Zope 2.3.2

Jerome Alet alet@unice.fr
Wed, 6 Jun 2001 15:21:09 +0200


On Wed, Jun 06, 2001 at 02:44:10PM +0200, Jerome Alet wrote:

Sorry, there was a Cut&Paste problem:

> --- CUT ---
> for username in self.acl_users.getUserNames() :
> 	user = self.acl_users.getUser(newusername)
> 	clearpassword = user._getPassword()
> 	# do something with username/clearpassword
> --- CUT ---

the second line should read:

	user = self.acl_users.getUser(username)

bye,

Jerome Alet