Potential security hole fixed, thanks Ashe for pointing it out

git-svn-id: file:///svn/phpbb/trunk@1132 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2001-10-06 00:51:53 +00:00
parent 598aab51a8
commit 0f2e3657e9

View file

@ -474,6 +474,7 @@ if( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
}
}
$passwd_sql = "";
if( !empty($password) && !empty($password_confirm) )
{
// Awww, the user wants to change their password, isn't that cute..
@ -510,6 +511,7 @@ if( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
}
}
$username_sql = "";
if($board_config['allow_namechange'] || $mode == "register")
{
if($username != $userdata['username'] || $mode == "register")