- don't set password via remoting if field is empty

Marius Cramer

2015-08-06 37b29231e47a0c4458dc1c15d98588f16f07e1e2

 interface/web/dns/dns_wizard.php

@@ -147,7 +147,7 @@
   $options_dns_servers = "";

   foreach ($dns_servers as $dns_server) {
      $options_dns_servers .= "<option value='$dns_server[server_id]'>$dns_server[server_name]</option>";
      $options_dns_servers .= '<option value="'.$dns_server['server_id'].'"'.($_POST['server_id'] == $dns_server['server_id'] ? ' selected="selected"' : '').'>'.$dns_server['server_name'].'</option>';
   }

   $app->tpl->setVar("server_id", $options_dns_servers);
@@ -197,7 +197,10 @@
}

if($_POST['create'] == 1) {

	
   //* CSRF Check
   $app->auth->csrf_token_check();
	
   $error = '';

   if ($post_server_id)
@@ -430,6 +433,11 @@

$app->tpl->setVar("title", 'DNS Wizard');

//* SET csrf token
$csrf_token = $app->auth->csrf_token_get('dns_wizard');
$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']);
$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']);

$lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_dns_wizard.lng';
include $lng_file;
$app->tpl->setVar($wb);