Jelajahi Sumber

sftpgo-auth: check user existence before password

Miraty 2 tahun lalu
induk
melakukan
e7b2856f92
1 mengubah file dengan 1 tambahan dan 1 penghapusan
  1. 1 1
      sftpgo-auth.php

+ 1 - 1
sftpgo-auth.php

@@ -4,7 +4,7 @@ require "router.php";
 
 $authData = json_decode(file_get_contents("php://input"), true);
 
-if (checkPassword($authData['username'], $authData['password']) === true) {
+if (userExist($authData['username']) === true AND checkPassword($authData['username'], $authData['password']) === true) {
 	echo '
 	{
 		"status": 1,