make sure POST data is sent urlencoded, our python-based password checker does not support form-data (c97a9ef)

make sure POST data is sent urlencoded, our python-based password checker does not support form-data

Hanno Böck commited on 2021-01-20 12:54:54
Zeige 1 geänderte Dateien mit 1 Einfügungen und 1 Löschungen.

inc/security.php 637623f..a051f00

inc/security.php

@@ -33,7 +33,7 @@ function strong_password($password, $user = array())
         curl_setopt($req, CURLOPT_FOLLOWLOCATION, 0);
         curl_setopt($req, CURLOPT_POST, 1);
         curl_setopt($req, CURLOPT_SAFE_UPLOAD, 1);
-        curl_setopt($req, CURLOPT_POSTFIELDS, array("password" => $password));
+        curl_setopt($req, CURLOPT_POSTFIELDS, "password=".urlencode($password));
         $result = chop(curl_exec($req));
         DEBUG($result);
     }


...	...	@@ -33,7 +33,7 @@ function strong_password($password, $user = array())
33	33	curl_setopt($req, CURLOPT_FOLLOWLOCATION, 0);
34	34	curl_setopt($req, CURLOPT_POST, 1);
35	35	curl_setopt($req, CURLOPT_SAFE_UPLOAD, 1);
36		- curl_setopt($req, CURLOPT_POSTFIELDS, array("password" => $password));
	36	+ curl_setopt($req, CURLOPT_POSTFIELDS, "password=".urlencode($password));
37	37	$result = chop(curl_exec($req));
38	38	DEBUG($result);
39	39	}
40	40

webinterface.git