From d9024fb802b075b44fcdad0702f955cd4848efa4 Mon Sep 17 00:00:00 2001
From: andi <andi@splitbrain.org>
Date: Mon, 4 Apr 2005 21:35:47 +0200
Subject: reject empty LDAP password

darcs-hash:20050404193547-9977f-77d14fcf00b404469027690f3a6004a125f044ab.gz
---
 inc/auth_ldap.php | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'inc')

diff --git a/inc/auth_ldap.php b/inc/auth_ldap.php
index 296b4e9c8..dfd54103b 100644
--- a/inc/auth_ldap.php
+++ b/inc/auth_ldap.php
@@ -69,6 +69,9 @@ function auth_checkPass($user,$pass){
   global $conf;
   $cnf = $conf['auth']['ldap'];
 
+  //reject empty password
+  if(empty($pass)) return false;
+
   //connect to LDAP Server
   $conn = auth_ldap_connect();
   if(!$conn) return false;
-- 
cgit v1.2.3