瀏覽代碼

Fix for Trac #559: ldap user can login with blank password

git-svn-id: http://svn.code.sf.net/p/itop/code/trunk@2110 a333f486-631f-4898-b8df-5754b55c2be0
dflaven 13 年之前
父節點
當前提交
dd2e5a1866
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      datamodel/authent-ldap/model.authent-ldap.php

+ 1 - 1
datamodel/authent-ldap/model.authent-ldap.php

@@ -120,7 +120,7 @@ class UserLDAP extends UserInternal
 				$aEntry = ldap_get_entries($hDS, $hSearchResult);
 				$sUserDN = $aEntry[0]['dn'];
 				$bUserBind =  @ldap_bind($hDS, $sUserDN, $sPassword);
-				if ($bUserBind !== false)
+				if (($bUserBind !== false) && !empty($sPassword))
 				{
 					ldap_unbind($hDS);
 					return true; // Password Ok