Make sure the user actually exists before checking their password

2018-05-13 17:13:25 +01:00 · 2018-05-13 17:13:25 +01:00 · 5961d11e76
parent 651d456793
commit 5961d11e76
1 changed files with 1 additions and 1 deletions
--- a/modules/page-login.php
+++ b/modules/page-login.php
@ -92,7 +92,7 @@ register_module([
 				// The user wants to log in
 				$user = $_POST["user"];
 				$pass = $_POST["pass"];
-				if(verify_password($pass, $settings->users->$user->password))
+				if(!empty($settings->users->$user) && verify_password($pass, $settings->users->$user->password))
 				{
 					// Success! :D