From f1f72ff9ddcfdeda9c05251ef410ff1dec238405 Mon Sep 17 00:00:00 2001 From: mcramer <m.cramer@pixcept.de> Date: Mon, 07 Jan 2013 10:17:09 -0500 Subject: [PATCH] Fixed: FS#2608 - Certain complex database passwords are not escaped properly (MySQL) - passwords are now enrypted already in tform (and remoting) and not stored in datalog clear text - clientdb plugin no longer encrypts password itself but receives crypted password --- interface/lib/classes/validate_client.inc.php | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/interface/lib/classes/validate_client.inc.php b/interface/lib/classes/validate_client.inc.php index 9b0546a..36370ab 100644 --- a/interface/lib/classes/validate_client.inc.php +++ b/interface/lib/classes/validate_client.inc.php @@ -81,7 +81,8 @@ ($global_config['ftpuser_prefix'] == '[CLIENTNAME]' || $global_config['ftpuser_prefix'] == '' || $global_config['shelluser_prefix'] == '[CLIENTNAME]' || - $global_config['shelluser_prefix'] == '' )) { + $global_config['shelluser_prefix'] == '' ) && + $global_config['client_username_web_check_disabled'] == 'n') { $errmsg = $validator['errmsg']; if(isset($app->tform->wordbook[$errmsg])) { return $app->tform->wordbook[$errmsg]."<br>\r\n"; -- Gitblit v1.9.1