[ekg2-commit] ekg2: commands.c (HEAD) [peres]

CVS commit cvs w toxygen.net
Sob, 6 Paź 2007, 19:12:08 CEST


Module name:	ekg2
Changes by:	peres	2007-10-06 19:12:06

Modified files:
	commands.c

Log message:
Fix /passwd (abuse detection) with UI_PASSWORD_INPUT.

Index: commands.c
===================================================================
RCS file: /home/cvs/ekg2/plugins/jabber/commands.c,v
diff -d -u -r1.201 -r1.202
--- commands.c	16 Sep 2007 20:50:29 -0000	1.201
+++ commands.c	6 Oct 2007 17:12:06 -0000	1.202
@@ -732,14 +732,16 @@
 		if (!tmp)
 			return -1;
 		passwd = jabber_escape(tmp);
+		session_set(session, "__new_password", tmp);
 		xfree(tmp);
-	} else
+	} else {
 		passwd = jabber_escape(params[0]);
+		session_set(session, "__new_password", params[0]);
+	}
 	watch_write(j->send_watch, 
 		"<iq type=\"set\" to=\"%s\" id=\"passwd%d\"><query xmlns=\"jabber:iq:register\"><username>%s</username><password>%s</password></query></iq>",
 		j->server, j->id++, username, passwd);
 	
-	session_set(session, "__new_password", params[0]);
 
 	xfree(username);
 	xfree(passwd);


Więcej informacji o liście dyskusyjnej ekg2-commit