Check for empty password, and redirect to requested URL.

horde · May 22, 2017 · e465501 · e465501
1 parent a9ea036
commit e465501
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/horde/scripts/get_login.php b/horde/scripts/get_login.php
@@ -22,10 +22,12 @@
 
 // Check for GET auth.
 if (empty($_GET['user']) ||
+    empty($_GET['pass']) ||
     !$auth->authenticate($_GET['user'], array('password' => $_GET['pass']))) {
     $e = new Horde_Exception_AuthenticationFailure();
     $e->application = 'horde';
     throw $e;
 }
 
+$horde_login_url = Horde_Util::getFormData('url');
 require HORDE_BASE . '/index.php';