Fix captcha - wasn't reading _GET parameters

digininja · Sep 11, 2015 · 7ca0a06 · 7ca0a06
1 parent c80e482
commit 7ca0a06
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/vulnerabilities/captcha/source/low.php b/vulnerabilities/captcha/source/low.php
@@ -36,6 +36,8 @@
 
 if( isset( $_POST[ 'Change' ] ) && ( $_POST[ 'step' ] == '2' ) ) {
     $hide_form = true;
+    $pass_new  = $_POST[ 'password_new' ];
+    $pass_conf = $_POST[ 'password_conf' ];
     if($pass_new != $pass_conf) {
 	$html .= "<pre><br />Both passwords must match.</pre>";
 	$hide_form = false;

diff --git a/vulnerabilities/captcha/source/medium.php b/vulnerabilities/captcha/source/medium.php
@@ -37,6 +37,9 @@
 
 if( isset( $_POST['Change'] ) && ( $_POST['step'] == '2' ) ) {
     $hide_form = true;
+    $pass_new  = $_POST[ 'password_new' ];
+    $pass_conf = $_POST[ 'password_conf' ];
+
     if(!$_POST['passed_captcha']) {
 	$html .= "<pre><br />You have not passed the CAPTCHA. Bad hacker, no doughnut.</pre>";
 	$hide_form = false;