Check input types on login
Hanno Böck commited on 2020-05-02 12:06:09
Zeige 1 geänderte Dateien mit 1 Einfügungen und 0 Löschungen.
- session/start.php 811c1bd..657027e
| ... | ... |
@@ -44,6 +44,7 @@ if (have_module('webmailtotp') && isset($_POST['webinterface_totpcode']) && isse
|
| 44 | 44 |
} |
| 45 | 45 |
|
| 46 | 46 |
if (isset($_POST['webinterface_username']) && isset($_POST['webinterface_password'])) {
|
| 47 |
+ check_input_types($_POST, array('webinterface_username' => 'string', 'webinterface_password' => 'string'));
|
|
| 47 | 48 |
$role = find_role($_POST['webinterface_username'], $_POST['webinterface_password']); |
| 48 | 49 |
if ($role === null) {
|
| 49 | 50 |
$_SESSION['role'] = ROLE_ANONYMOUS; |
| 50 | 51 |