diogo/symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Security] tweaked some exception messages

Browse Source
This commit is contained in:
Fabien Potencier 2011-04-12 11:41:39 +02:00
parent 41a1a75b92
commit e6fd8deb00
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/Symfony/Component/Security/Core/Authentication/Provider/DaoAuthenticationProvider.php
View File

@ -59,11 +59,11 @@ class DaoAuthenticationProvider extends UserAuthenticationProvider
}
} else {
if (!$presentedPassword = $token->getCredentials()) {
throw new BadCredentialsException('Bad credentials');
throw new BadCredentialsException('The presented password cannot be empty.');
}
if (!$this->encoderFactory->getEncoder($user)->isPasswordValid($user->getPassword(), $presentedPassword, $user->getSalt())) {
throw new BadCredentialsException('Bad credentials');
throw new BadCredentialsException('The presented password is invalid.');
}
}
}