Don't store invalid credentials to session (bug #376)

This commit is contained in:
Jakub Vrana 2014-01-30 10:27:30 -08:00
parent 125b519937
commit 6acf188c2f
2 changed files with 2 additions and 1 deletions

View file

@ -109,7 +109,7 @@ function auth_error($exception = null) {
}
function set_password($vendor, $server, $username, $password) {
$_SESSION["pwds"][$vendor][$server][$username] = ($_COOKIE["adminer_key"]
$_SESSION["pwds"][$vendor][$server][$username] = ($_COOKIE["adminer_key"] && is_string($password)
? array(encrypt_string($password, $_COOKIE["adminer_key"]))
: $password
);

View file

@ -2,6 +2,7 @@ Adminer 4.0.3-dev:
MongoDB: insert, truncate, indexes
SimpleDB, MongoDB: insert more fields at once
SQLite: Fix creating table and altering primary key, bug since Adminer 4.0.0
Don't store invalid credentials to session, bug since Adminer 4.0.0
Norweigan translation
Adminer 4.0.2 (released 2014-01-11):