•  
      request #42194 Crash when expected parameters are not provided in the lost password form
    Infos
    #42194
    Thomas Gerbet (tgerbet)
    2025-03-07 11:17
    2025-03-07 09:28
    43870
    Details
    Crash when expected parameters are not provided in the lost password form

    Easiest way to reproduce: curl -X POST https://tuleap.example.com/account/lostpw

    Trace:

    PHP Fatal error:  Uncaught TypeError: UserManager::getUserByUserName(): Argument #1 ($user_name) must be of type string, bool given, called in /usr/share/tuleap/src/common/User/Account/LostPassword/LostPasswordController.php on line 70 and defined in /usr/share/tuleap/src/common/User/UserManager.php:192
    Stack trace:
    #0 /usr/share/tuleap/src/common/User/Account/LostPassword/LostPasswordController.php(70): UserManager->getUserByUserName()
    #1 /usr/share/tuleap/src/common/Request/FrontRouter.php(241): Tuleap\User\Account\LostPassword\LostPasswordController->process()
    #2 /usr/share/tuleap/src/common/Request/FrontRouter.php(98): Tuleap\Request\FrontRouter->routeHandler()
    #3 /usr/share/tuleap/src/www/index.php(50): Tuleap\Request\FrontRouter->route()
    #4 {main}
    
    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2025-03-07
    Attachments
    Empty
    References

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2025-03-07 09:31

    • Summary
      -Crash when expected parameter are not provided to the lost password form 
      +Crash when expected parameters are not provided in the lost password form 
    • Status changed from Under implementation to Under review