From 5a2ca0cc4ae85cc15960201c86f131cb822f714f Mon Sep 17 00:00:00 2001
From: Yassine Doghri <yassine@doghri.fr>
Date: Wed, 19 Oct 2022 11:47:26 +0000
Subject: [PATCH] fix(install): add password validation when creating super
 admin

---
 modules/Install/Controllers/InstallController.php | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/modules/Install/Controllers/InstallController.php b/modules/Install/Controllers/InstallController.php
index c5705c9f..e0d131f2 100644
--- a/modules/Install/Controllers/InstallController.php
+++ b/modules/Install/Controllers/InstallController.php
@@ -292,7 +292,18 @@ class InstallController extends Controller
      */
     public function attemptCreateSuperAdmin(): RedirectResponse
     {
+        // validate user password
+        $rules = [
+            'password' => 'required|strong_password',
+        ];
+
         $userModel = new UserModel();
+        if (! $this->validate($rules)) {
+            return redirect()
+                ->back()
+                ->withInput()
+                ->with('errors', $userModel->errors());
+        }
 
         // Save the user
         $user = new User([
@@ -301,6 +312,7 @@ class InstallController extends Controller
             'password' => $this->request->getPost('password'),
             'is_owner' => true,
         ]);
+
         try {
             $userModel->save($user);
         } catch (ValidationException) {