extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-11-23 00:13:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

added a check agains ldap-insertion in the login-name

Browse Source
This commit is contained in:
Ralf Becker 2003-10-02 21:01:37 +00:00
parent 01dcc7cae1
commit c218e158b1
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
phpgwapi/inc/class.auth_ldap.inc.php
View File

@ -35,7 +35,12 @@
error_reporting MUST be set to zero, otherwise you'll get nasty LDAP errors with a bad login/pass...
these are just "warnings" and can be ignored.....
*/
error_reporting(0);
error_reporting(0);
if (ereg('[()|&=*,<>!~]',$username))
{
return False;
}
if(!$ldap = @ldap_connect($GLOBALS['phpgw_info']['server']['ldap_host']))
{