diff options
| author | Michael Tänzer <neo@nhng.de> | 2011-06-22 00:21:45 +0200 |
|---|---|---|
| committer | Michael Tänzer <neo@nhng.de> | 2011-06-22 00:21:45 +0200 |
| commit | e7368868ba88433956ad034fb7883d2dcd9566be (patch) | |
| tree | 2718e822d17fe30cec13764ae61529c8901734d2 /www/index.php | |
| parent | 62f99b561a13e51e8f4d55a36092de536c531d99 (diff) | |
| download | cacert-devel-e7368868ba88433956ad034fb7883d2dcd9566be.tar.gz cacert-devel-e7368868ba88433956ad034fb7883d2dcd9566be.tar.xz cacert-devel-e7368868ba88433956ad034fb7883d2dcd9566be.zip | |
#637: Move a subset of password checks to a separate function and check itbug-637
on every login
The subset are some very lightweight checks that contains the check for the
old password suggestion
Signed-off-by: Michael Tänzer <neo@nhng.de>
Diffstat (limited to 'www/index.php')
| -rw-r--r-- | www/index.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/www/index.php b/www/index.php index 2634a47..d42a4dc 100644 --- a/www/index.php +++ b/www/index.php @@ -332,7 +332,7 @@ $_SESSION['_config']['errmsg'] .= _("For your own security you must enter 5 lost password questions and answers.")."<br>"; $_SESSION['_config']['oldlocation'] = "account.php?id=13"; } - if ($pword === "Fr3d Sm|7h") + if (checkpwlight($pword) < 3) $_SESSION['_config']['oldlocation'] = "account.php?id=14&force=1"; if($_SESSION['_config']['oldlocation'] != "") header("location: https://".$_SERVER['HTTP_HOST']."/".$_SESSION['_config']['oldlocation']); |