mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-28 14:18:52 +00:00
Potential security hole fixed, thanks Ashe for pointing it out
git-svn-id: file:///svn/phpbb/trunk@1132 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
598aab51a8
commit
0f2e3657e9
1 changed files with 2 additions and 0 deletions
|
@ -474,6 +474,7 @@ if( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
$passwd_sql = "";
|
||||||
if( !empty($password) && !empty($password_confirm) )
|
if( !empty($password) && !empty($password_confirm) )
|
||||||
{
|
{
|
||||||
// Awww, the user wants to change their password, isn't that cute..
|
// Awww, the user wants to change their password, isn't that cute..
|
||||||
|
@ -510,6 +511,7 @@ if( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
$username_sql = "";
|
||||||
if($board_config['allow_namechange'] || $mode == "register")
|
if($board_config['allow_namechange'] || $mode == "register")
|
||||||
{
|
{
|
||||||
if($username != $userdata['username'] || $mode == "register")
|
if($username != $userdata['username'] || $mode == "register")
|
||||||
|
|
Loading…
Add table
Reference in a new issue