Allow nulling a password

diff --git a/wcfsetup/install/files/lib/data/user/UserEditor.class.php b/wcfsetup/install/files/lib/data/user/UserEditor.class.php
index 92415beb85e32a1e64a547c107cf2281505ffa08..b8b11f7cb76eb0134a1160bac0892775d7240005 100644 (file)
--- a/wcfsetup/install/files/lib/data/user/UserEditor.class.php
+++ b/wcfsetup/install/files/lib/data/user/UserEditor.class.php
@@ -71,8 +71,13 @@ class UserEditor extends DatabaseObjectEditor implements IEditableCachedObject {
         */
        public function update(array $parameters = []) {
                // update salt and create new password hash
-               if (isset($parameters['password']) && $parameters['password'] !== '') {
-                       $parameters['password'] = PasswordUtil::getDoubleSaltedHash($parameters['password']);
+               if (array_key_exists('password', $parameters) && $parameters['password'] !== '') {
+                       if ($parameters['password'] === null) {
+                               $parameters['password'] = 'invalid:';
+                       }
+                       else {
+                               $parameters['password'] = PasswordUtil::getDoubleSaltedHash($parameters['password']);
+                       }
                        $parameters['accessToken'] = StringUtil::getRandomID();
                        
                        // update accessToken