Changeset 2709:d70f7e2cb2c9 for inc/core/class.dc.xmlrpc.php

Timestamp:

05/15/14 08:35:38 (11 years ago)

Author:

Dsls

Branch:

2.6

Children:

2710:f99841305743, 2712:121f94747a10

Message:

Strenghened xmlrpc auth, categories warning.

Many, many thanks to Egidio Romano for the advice.

File:

• inc/core/class.dc.xmlrpc.php (modified) (1 diff)

inc/core/class.dc.xmlrpc.php

@@ -264 +264 @@
      private function setUser($user_id,$pwd)
      {
-          if ($this->core->auth->userID() == $user_id) {
-               return true;
-          }
-
-          if ($this->core->auth->checkUser($user_id,$pwd) !== true) {
+          if (empty($pwd) || $this->core->auth->checkUser($user_id,$pwd) !== true) {
                throw new Exception('Login error');
           }