From 222269ff64d514a76b5035b7eb46e8d571248f47 Mon Sep 17 00:00:00 2001 From: Jon Jensen Date: Thu, 22 Mar 2001 22:50:12 +0000 Subject: [PATCH] Latest changes for 4.6.4. --- WHATSNEW | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/WHATSNEW b/WHATSNEW index 953348402..992d48729 100644 --- a/WHATSNEW +++ b/WHATSNEW @@ -15,6 +15,15 @@ Interchange 4.6.4 * Fixed bug with encrypted-password users not being logged in after new account creation. Reported by tamas.kohegyi@unforgettable.com. +* Add CGIWRAP workaround. Remove bogus PATH_INFO that is prepended to + SCRIPT_NAME. + +* Add unusable password hash for group ':backup' in access.asc. It was + possible to access the admin interface with this username and no password. + +* Disallow login attempts with group names, usernames with invalid + characters, and blank usernames or passwords. + Interchange 4.6.3