harmacist/vichan
1
0
Fork 0
forked from GithubBackups/vichan
Code Pull Requests Activity

add simple sanity check for logins

Browse Source
This commit is contained in:
Lorenzo Yario 2025-10-29 16:43:18 -05:00 committed by GitHub
parent 5e472bafac
commit 34e39905f9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
inc/mod/pages.php
View File

@ -57,6 +57,9 @@ function mod_login(Context $ctx, $redirect = false) {
// Check if inputs are set and not empty // Check if inputs are set and not empty
if (!isset($_POST['username'], $_POST['password']) || $_POST['username'] == '' || $_POST['password'] == '') { if (!isset($_POST['username'], $_POST['password']) || $_POST['username'] == '' || $_POST['password'] == '') {
$args['error'] = $config['error']['invalid']; $args['error'] = $config['error']['invalid'];
}
elseif (strlen($_POST['password']) > 128 || strlen($_POST['username']) > 128) {
$args['error'] = $config['error']['infotoolong'];
} elseif (!login($_POST['username'], $_POST['password'])) { } elseif (!login($_POST['username'], $_POST['password'])) {
if ($config['syslog']) if ($config['syslog'])
_syslog(LOG_WARNING, 'Unauthorized login attempt!'); _syslog(LOG_WARNING, 'Unauthorized login attempt!');