2007-04-19 Igor Zelmanovich <igorz@mainsoft.com>

	* DerbyMembershipProvider.cs:
	ChangePassword throws exception if new password has invalid format.

svn path=/trunk/mcs/; revision=75956

diff --git a/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/ChangeLog b/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/ChangeLog
index 90f0c5b62686c11ecd3837e6bc95def08a311860..f2a3094444693b81ea5772dff4e36959276494ff 100644 (file)
--- a/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/ChangeLog
+++ b/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/ChangeLog
@@ -1,3 +1,8 @@
+2007-04-19 Igor Zelmanovich <igorz@mainsoft.com>\r
+\r
+       * DerbyMembershipProvider.cs:\r
+       ChangePassword throws exception if new password has invalid format.     \r
+\r
 2007-02-21  Vladimir Krasnov  <vladimirk@mainsoft.com>\r
 \r
        * DerbyMembershipProvider.cs: fixed Initialize, throw exception if no\r
@@ -50,4 +55,4 @@
 \r
        * DerbyMembershipHelper.cs:\r
        * DerbyMembershipProvider.cs: fixed CreateUser method, when user\r
-       already exists in Users table and adding Membership info
\ No newline at end of file
+       already exists in Users table and adding Membership info\r

diff --git a/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/DerbyMembershipProvider.cs b/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/DerbyMembershipProvider.cs
index 7590f46366106c19b06081b136922f19e0ee5611..95d668071540f1ec58f522b47c8142115446b5e8 100644 (file)
--- a/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/DerbyMembershipProvider.cs
+++ b/mcs/class/Mainsoft.Web/Mainsoft.Web.Security/DerbyMembershipProvider.cs
@@ -98,6 +98,12 @@ namespace Mainsoft.Web.Security {
                        CheckParam ("oldPwd", oldPwd, 128);\r
                        CheckParam ("newPwd", newPwd, 128);\r
 \r
+                       if (!CheckPassword (newPwd))\r
+                               throw new ArgumentException (string.Format (\r
+                                               "New Password invalid. New Password length minimum: {0}. Non-alphanumeric characters required: {1}.",\r
+                                               MinRequiredPasswordLength,\r
+                                               MinRequiredNonAlphanumericCharacters));\r
+\r
                        using (DbConnection connection = CreateConnection ()) {\r
                                PasswordInfo pi = ValidateUsingPassword (username, oldPwd);\r
 \r