From 2d0fd2a077ddd4681417493a489bed7765b762c7 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Tim=20D=C3=BCsterhus?= Date: Wed, 23 Dec 2020 14:10:13 +0100 Subject: [PATCH] Set password = null when registering via a 3rdParty provider --- wcfsetup/install/files/lib/form/RegisterForm.class.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/wcfsetup/install/files/lib/form/RegisterForm.class.php b/wcfsetup/install/files/lib/form/RegisterForm.class.php index 11d0454b07..3c239f6199 100644 --- a/wcfsetup/install/files/lib/form/RegisterForm.class.php +++ b/wcfsetup/install/files/lib/form/RegisterForm.class.php @@ -435,8 +435,8 @@ class RegisterForm extends UserAddForm { break; } - // create fake password - $this->password = Hex::encode(\random_bytes(20)); + // Accounts connected to a 3rdParty login do not have passwords. + $this->password = null; } $eventParameters = [ -- 2.20.1