fix: apply a security fix due to Type Confusion and potential authent…

…ication bypass
lirantal · Apr 1, 2022 · e8ec1be · e8ec1be
1 parent eae94db
commit e8ec1be
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/daloradius-users/pref-auth-password-edit.php b/daloradius-users/pref-auth-password-edit.php
@@ -36,7 +36,7 @@
 		$newPassword = $_POST['newpassword'];
 		$verifyPassword = $_POST['verifypassword'];
 
-		if ($newPassword == $verifyPassword) {
+		if ($newPassword === $verifyPassword) {
 
 			if (trim($currentPassword) != "") {