From f15c26869cbdc73090955967bd104b5cf5fe119b Mon Sep 17 00:00:00 2001
From: thomascube <thomas@roundcube.net>
Date: Wed, 11 Apr 2007 15:28:55 -0400
Subject: [PATCH] Don't allow empty user names but empty passwords
---
index.php | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/index.php b/index.php
index f365ef9..638bc8e 100644
--- a/index.php
+++ b/index.php
@@ -2,7 +2,7 @@
/*
+-----------------------------------------------------------------------+
| RoundCube Webmail IMAP Client |
- | Version 0.1-20070327 |
+ | Version 0.1-20070411 |
| |
| Copyright (C) 2005-2007, RoundCube Dev. - Switzerland |
| Licensed under the GNU GPL |
@@ -40,7 +40,7 @@
*/
-define('RCMAIL_VERSION', '0.1-20070327');
+define('RCMAIL_VERSION', '0.1-20070411');
// define global vars
$CHARSET = 'UTF-8';
@@ -172,7 +172,7 @@
{
show_message("cookiesdisabled", 'warning');
}
- else if ($_SESSION['temp'] && isset($_POST['_user']) && isset($_POST['_pass']) &&
+ else if ($_SESSION['temp'] && !empty($_POST['_user']) && isset($_POST['_pass']) &&
rcmail_login(get_input_value('_user', RCUBE_INPUT_POST),
get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1'), $host))
{
--
Gitblit v1.9.1