Bug in security setting apps

Scriptcase 9 Bugs
#1

In the security module the password for the SMTP is erase every time something is modify.

The password should not be erase if the field is empty, the code in onValidate should look like this:

if (strlen({smtp_pass}) >= 8) {
	sc_exec_sql($sql . sc_sql_injection({smtp_pass}) 
				. " WHERE set_name=". sc_sql_injection('smtp_pass') );
}
#2

@jlboutin60,

Since this is a text field with the “Password type field” option checked, this is the expected behavior for security reasons.

Is this the “problem” you are facing, or could it be something else?

We look forward to any feedback.

Best regards!

#3

@Danilo_Lima

Thank you for your quick answer!

Let me explained you what happened

One of my customer decide to change the theme of his program, so he simply went in the settings apps, change the theme and save.

A few hour later he call me panicking that is program doesn’t send email anymore, that he verify with his IT guy and that there were no change in their setup and don’t think that there were change on the Microsoft side (Outlook365).

So I start to investigate to find out that the SMTP password has been erase, he told me that he didn’t go in the SMTP page and that the only thing he has done was to change the default theme.

This is why I consider this a bug, the password shouldn’t be erase because a setting was modified. It should only be overwrite if the field has been fill up.

Best regards!

#4

Hi @jlboutin60.
To prevent this I saved the password value on load. Then when the user save, if password is empty (not changed) I put before update the original password value.

onValidate

if({clave_mail}!=={smtp_pass} and {smtp_pass}==’’)
{
{smtp_pass}={clave_mail};
}

Regards.

#5

The other way is to take off Password field option on the field.