diff --git a/checkin_notes b/checkin_notes index b20a986bcf..0ae9d9802c 100755 --- a/checkin_notes +++ b/checkin_notes @@ -11516,3 +11516,9 @@ Charlie 8 Sept 2005 mac_build.html versions.inc +David 8 Sept 2005 + - User web: don't call process_user_text() on passwords; + it's not needed, and breaks passwords containing punctuation + + html/user/ + edit_password_action.php diff --git a/doc/boinc_news.inc b/doc/boinc_news.inc index 13223ae675..99757a1104 100644 --- a/doc/boinc_news.inc +++ b/doc/boinc_news.inc @@ -2,6 +2,10 @@ $project_news = array( +array("September 6, 2005", + "Searching for Gravity @ Home, an article about Einstein@home and BOINC, + appears in the September 2005 issue of IEEE's The Institute." +), array("August 29, 2005", "A conversation with David Anderson in ACM Queue Magazine." ), diff --git a/doc/index.php b/doc/index.php index 59e29a0eea..b1cba4bdaa 100644 --- a/doc/index.php +++ b/doc/index.php @@ -33,7 +33,7 @@ resources

- BOINC lets you donate computing power to many scientific research projects: + BOINC lets you donate computing power to scientific research projects:

diff --git a/html/user/edit_passwd_action.php b/html/user/edit_passwd_action.php index 4aeff98d2e..518fc4a799 100644 --- a/html/user/edit_passwd_action.php +++ b/html/user/edit_passwd_action.php @@ -8,11 +8,13 @@ db_init(); $auth = process_user_text(post_str("auth", true)); $email_addr = strtolower(process_user_text(post_str("email_addr", true))); -$old_passwd = process_user_text(post_str("old_passwd", true)); -$passwd = process_user_text(post_str("passwd", true)); -$passwd2 = process_user_text(post_str("passwd2", true)); +// Note: don't call process_user_text() on passwords. +// This is not needed, and will break passwords containing punctuation +$old_passwd = post_str("old_passwd", true); +$passwd = post_str("passwd"); +$passwd2 = post_str("passwd2"); if ($passwd != $passwd2) { error_page("New passwords are different");