Fix for bug 42037 (user passwords visible in editusers.cgi). Patch

submitted by JRobertson@medevolve.com (Jon Robertson)

diff --git a/editusers.cgi b/editusers.cgi
index 243e7ee04fff508fef4e4c4a37be8dbe1acd59f7..e8fdd62c1301d79131c6f4dc49584a3400f857da 100755 (executable)
--- a/editusers.cgi
+++ b/editusers.cgi
@@ -109,7 +109,7 @@ sub EmitFormElements ($$$$$$$)
     if ($editall) {
         print "</TR><TR>\n";
         print "  <TH ALIGN=\"right\">Password:</TH>\n";
-        print "  <TD><INPUT SIZE=16 MAXLENGTH=16 NAME=\"password\" VALUE=\"$password\"></TD>\n";
+        print "  <TD><INPUT TYPE=\"PASSWORD\" SIZE=16 MAXLENGTH=16 NAME=\"password\" VALUE=\"$password\"></TD>\n";
 
         print "</TR><TR>\n";
         print "  <TH ALIGN=\"right\">Email notification:</TH>\n";