From 66d75d16fcc1e531811fb3bcf32a2f4318c01588 Mon Sep 17 00:00:00 2001 From: Dries Buytaert Date: Fri, 7 May 2010 14:48:10 +0000 Subject: - Patch #547490 by ugerhard, Jody Lynn, Matt V.: entering only 'Confirm password' field passes validation and returns success message. --- includes/form.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'includes') diff --git a/includes/form.inc b/includes/form.inc index f271eebfe..cc2445108 100644 --- a/includes/form.inc +++ b/includes/form.inc @@ -2174,8 +2174,8 @@ function form_process_password_confirm($element) { */ function password_confirm_validate($element, &$element_state) { $pass1 = trim($element['pass1']['#value']); - if (!empty($pass1)) { - $pass2 = trim($element['pass2']['#value']); + $pass2 = trim($element['pass2']['#value']); + if (!empty($pass1) || !empty($pass2)) { if (strcmp($pass1, $pass2)) { form_error($element, t('The specified passwords do not match.')); } -- cgit v1.2.3