Server side :
* Trim password and login before instertion * Can use empty master key to see user passwords * Fix a bug : can't decode multiple queries from client Client side : * Don't send empty username * Update README
This commit is contained in:
@@ -45,7 +45,8 @@ for ($i=0; isset($_POST["k$i"]); $i++)
|
||||
{
|
||||
$statement->bindValue(":login", $_POST["k$i"]);
|
||||
$result = $statement->execute();
|
||||
$row = $result->fetchArray();
|
||||
$row = $result->fetchArray(SQLITE3_ASSOC);
|
||||
$result->finalize();
|
||||
if (isset($row["password"]))
|
||||
{
|
||||
echo "pass=" . $row["password"] . "\n";
|
||||
|
||||
Reference in New Issue
Block a user