#10115 fixed special character in fullname if user have permission

2023-01-26 09:16:02 +01:00 · 2023-01-26 09:16:02 +01:00 · 8fb5fc0d85
parent 783f9a1793
commit 8fb5fc0d85
1 changed files with 1 additions and 1 deletions
--- a/pandora_console/include/auth/mysql.php
+++ b/pandora_console/include/auth/mysql.php
@ -398,7 +398,7 @@ function process_user_login_remote($login, $pass, $api=false)
            $config['auth_error'] = __('User not found in database or incorrect password');
            return false;
        } else {
-            $user_info['fullname'] = $sr['cn'][0];
+            $user_info['fullname'] = io_safe_input($sr['cn'][0]);
            $user_info['email'] = $sr['mail'][0];

            // Create the user.