tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-30 17:25:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix ldap auth php function passwords with special chars

Browse Source
This commit is contained in:
Calvo 2021-10-05 18:00:16 +02:00
parent d1b9dc4ef8
commit 1fca24d8dc
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pandora_console/include/auth/mysql.php
View File

@ -770,7 +770,7 @@ function ldap_process_user_login($login, $password)
io_safe_output($config['ldap_base_dn']), io_safe_output($config['ldap_base_dn']),
$config['ldap_login_attr'], $config['ldap_login_attr'],
io_safe_output($config['ldap_admin_login']), io_safe_output($config['ldap_admin_login']),
io_safe_output($config['ldap_admin_pass']), io_output_password($config['ldap_admin_pass']),
io_safe_output($login) io_safe_output($login)
); );
@ -794,7 +794,7 @@ function ldap_process_user_login($login, $password)
} else { } else {
// PHP LDAP function // PHP LDAP function
if ($config['ldap_admin_login'] != '' && $config['ldap_admin_pass'] != '') { if ($config['ldap_admin_login'] != '' && $config['ldap_admin_pass'] != '') {
if (!@ldap_bind($ds, io_safe_output($config['ldap_admin_login']), $config['ldap_admin_pass'])) { if (!@ldap_bind($ds, io_safe_output($config['ldap_admin_login']), io_output_password($config['ldap_admin_pass']))) {
$config['auth_error'] = 'Admin ldap connection fail'; $config['auth_error'] = 'Admin ldap connection fail';
@ldap_close($ds); @ldap_close($ds);
return false; return false;

2
pandora_console/include/functions_config.php
View File

@ -620,7 +620,7 @@ function config_update_config()
$error_update[] = __('Admin LDAP login'); $error_update[] = __('Admin LDAP login');
} }
if (!config_update_value('ldap_admin_pass', get_parameter('ldap_admin_pass'))) { if (!config_update_value('ldap_admin_pass', io_input_password(io_safe_output(get_parameter('ldap_admin_pass'))))) {
$error_update[] = __('Admin LDAP password'); $error_update[] = __('Admin LDAP password');
} }