FS#2761 Dokuwiki MUST display an error message if pack() is disabled by the server administrator

ACL & Authentication

• 

  2013-03-31 isithran

  Steps to reproduce:
  Add pack() to the disabled functions on the hosting virtualhost.
  
  Impact:
  User authentication silently fail. The only evidence is an error logging in apache error log.
• 

  2013-03-31 lupo49

  I can reproduce the issue. The pack() function inside the auth component: The login process cannot produce hashes for the entered password and will run into this issue (PassHash.class.php).
  
  I have opened a pull request, which modifies the install.php to display an error if the function is disabled. (https://github.com/splitbrain/dokuwiki/pull/206)
• 

  2013-03-31 lupo49

  Would it help, if the availability of functions is also checked when browsing a page ?do=check parameter?
• 

  2013-03-31 isithran

  Sure, as it would warn the server admin that the authentication cannot perform properly.
• 

  2013-04-07 lupo49

  Fixed / 0a820853