From f36ccd3a739c665b851b9ebcdc31315364ddd722 Mon Sep 17 00:00:00 2001 From: Roland Gruber Date: Thu, 16 Dec 2004 19:29:28 +0000 Subject: [PATCH] fixed passwords with quotes (1081460) --- lam-0.4/templates/login.php | 3 +++ lam/templates/login.php | 3 +++ 2 files changed, 6 insertions(+) diff --git a/lam-0.4/templates/login.php b/lam-0.4/templates/login.php index 45437111..818596ad 100644 --- a/lam-0.4/templates/login.php +++ b/lam-0.4/templates/login.php @@ -294,6 +294,9 @@ if($_POST['checklogin']) } else { + if (get_magic_quotes_gpc() == 1) { + $_POST['passwd'] = stripslashes($_POST['passwd']); + } $result = $_SESSION['ldap']->connect($_POST['username'],$_POST['passwd']); // Connect to LDAP server for verifing username/password if($result === 0) // Username/password correct. Do some configuration and load main frame. diff --git a/lam/templates/login.php b/lam/templates/login.php index e8c26acf..2f319ada 100644 --- a/lam/templates/login.php +++ b/lam/templates/login.php @@ -299,6 +299,9 @@ if($_POST['checklogin']) } else { + if (get_magic_quotes_gpc() == 1) { + $_POST['passwd'] = stripslashes($_POST['passwd']); + } $result = $_SESSION['ldap']->connect($_POST['username'],$_POST['passwd']); // Connect to LDAP server for verifing username/password if($result === 0) // Username/password correct. Do some configuration and load main frame.