Do not attempt logging in without password (bug #676)

This commit is contained in:
Jakub Vrana
2019-05-14 09:07:51 +02:00
parent 0e6f1972e9
commit 15900301ee
3 changed files with 3 additions and 2 deletions

View File

@@ -160,7 +160,7 @@ if (isset($_GET["username"]) && !class_exists("Min_DB")) {
stop_session(true);
if (isset($_GET["username"])) {
if (isset($_GET["username"]) && is_string(get_password())) {
list($host, $port) = explode(":", SERVER, 2);
if (is_numeric($port) && $port < 1024) {
auth_error(lang('Connecting to privileged ports is not allowed.'));