From 9c1a5d0faf60e3876aca1d5defeaef6aa87cda8a Mon Sep 17 00:00:00 2001 From: huzvar <89766648+huzvar@users.noreply.github.com> Date: Thu, 3 Mar 2022 14:39:42 +0100 Subject: [PATCH] Fix change empty password with accept weak passwords. (#141) --- www/change_password/index.php | 1 + 1 file changed, 1 insertion(+) diff --git a/www/change_password/index.php b/www/change_password/index.php index b56568c..dd44f5c 100644 --- a/www/change_password/index.php +++ b/www/change_password/index.php @@ -9,6 +9,7 @@ set_page_access("user"); if (isset($_POST['change_password'])) { + if (!$_POST['password']) { $not_strong_enough = 1; } if ((!is_numeric($_POST['pass_score']) or $_POST['pass_score'] < 3) and $ACCEPT_WEAK_PASSWORDS != TRUE) { $not_strong_enough = 1; } if (preg_match("/\"|'/",$_POST['password'])) { $invalid_chars = 1; } if ($_POST['password'] != $_POST['password_match']) { $mismatched = 1; }