Changeset 541 in subversion

Timestamp:

Apr 11, 2007 3:28:55 PM (6 years ago)

Author:

thomasb

Message:

Don't allow empty user names but empty passwords

File:

• trunk/roundcubemail/index.php (modified) (3 diffs)

trunk/roundcubemail/index.php

@@ -3 +3 @@
  +-----------------------------------------------------------------------+
  | RoundCube Webmail IMAP Client                                         |
- | Version 0.1-20070327                                                  |
+ | Version 0.1-20070411                                                  |
  |                                                                       |
  | Copyright (C) 2005-2007, RoundCube Dev. - Switzerland                 |
@@ -41 +41 @@
 */
 
-define('RCMAIL_VERSION', '0.1-20070327');
+define('RCMAIL_VERSION', '0.1-20070411');
 
 // define global vars
@@ -173 +173 @@
     show_message("cookiesdisabled", 'warning');
     }
-  else if ($_SESSION['temp'] && isset($_POST['_user']) && isset($_POST['_pass']) &&
+  else if ($_SESSION['temp'] && !empty($_POST['_user']) && isset($_POST['_pass']) &&
            rcmail_login(get_input_value('_user', RCUBE_INPUT_POST),
               get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1'), $host))