mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-16 05:34:01 +02:00
[ticket/8713] Do not trim login inputs
Create a function to request variables which are not trimmed. All requests for passwords (except forum passwords) now use the untrimmed request function. PHPBB3-8713
This commit is contained in:
@@ -32,7 +32,7 @@ class acp_users
|
||||
{
|
||||
global $config, $db, $user, $auth, $template, $cache;
|
||||
global $phpbb_root_path, $phpbb_admin_path, $phpEx, $table_prefix, $file_uploads;
|
||||
global $phpbb_dispatcher;
|
||||
global $phpbb_dispatcher, $request;
|
||||
|
||||
$user->add_lang(array('posting', 'ucp', 'acp/users'));
|
||||
$this->tpl_name = 'acp_users';
|
||||
@@ -770,8 +770,8 @@ class acp_users
|
||||
'username' => utf8_normalize_nfc(request_var('user', $user_row['username'], true)),
|
||||
'user_founder' => request_var('user_founder', ($user_row['user_type'] == USER_FOUNDER) ? 1 : 0),
|
||||
'email' => strtolower(request_var('user_email', $user_row['user_email'])),
|
||||
'new_password' => request_var('new_password', '', true),
|
||||
'password_confirm' => request_var('password_confirm', '', true),
|
||||
'new_password' => $request->untrimed_variable('new_password', '', true),
|
||||
'password_confirm' => $request->untrimed_variable('password_confirm', '', true),
|
||||
);
|
||||
|
||||
// Validation data - we do not check the password complexity setting here
|
||||
|
Reference in New Issue
Block a user