From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Wed, 23 Dec 2020 13:10:13 +0000 (+0100)
Subject: Set password = null when registering via a 3rdParty provider
X-Git-Tag: 5.4.0_Alpha_1~513
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=2d0fd2a077ddd4681417493a489bed7765b762c7;p=GitHub%2FWoltLab%2FWCF.git

Set password = null when registering via a 3rdParty provider
---

diff --git a/wcfsetup/install/files/lib/form/RegisterForm.class.php b/wcfsetup/install/files/lib/form/RegisterForm.class.php
index 11d0454b07..3c239f6199 100644
--- a/wcfsetup/install/files/lib/form/RegisterForm.class.php
+++ b/wcfsetup/install/files/lib/form/RegisterForm.class.php
@@ -435,8 +435,8 @@ class RegisterForm extends UserAddForm {
 				break;
 			}
 			
-			// create fake password
-			$this->password = Hex::encode(\random_bytes(20));
+			// Accounts connected to a 3rdParty login do not have passwords.
+			$this->password = null;
 		}
 
 		$eventParameters = [