check if pwd is passed in _POST

This commit is contained in:
Uwe Steinmann 2014-07-24 07:53:08 +02:00
parent 5641b5b067
commit 760da5e2b4

View File

@ -50,9 +50,12 @@ if (!isset($login) || strlen($login)==0) {
exit;
}
$pwd = (string) $_POST["pwd"];
if (get_magic_quotes_gpc()) {
$pwd = stripslashes($pwd);
$pwd = '';
if(isset($_POST['pwd'])) {
$pwd = (string) $_POST["pwd"];
if (get_magic_quotes_gpc()) {
$pwd = stripslashes($pwd);
}
}
$guestUser = $dms->getUser($settings->_guestID);