From 9310015097e21670afcd7b6830ee1f8f9bb57710 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Mon, 20 Apr 2026 16:03:39 +0200
Subject: [PATCH] remove null bytes in login

---
 op/op.Login.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/op/op.Login.php b/op/op.Login.php
index 135c5aefc..63d05d9c8 100644
--- a/op/op.Login.php
+++ b/op/op.Login.php
@@ -50,8 +50,8 @@ if (isset($_REQUEST["sesstheme"]) && strlen($_REQUEST["sesstheme"])>0 && is_nume
 }
 
 if (isset($_REQUEST["login"])) {
-	$login = $_REQUEST["login"];
-	$login = str_replace("*", "", $login);
+	$login = trim($_REQUEST["login"]);
+	$login = str_replace(["*", "\0"], "", $login);
 }
 
 if (!isset($login) || strlen($login)==0) {