fix: removed possible bypass to allow weak passwords

thorsten · Mar 10, 2023 · f612a72 · f612a72
1 parent 7f0f921
commit f612a72
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/phpmyfaq/admin/ajax.user.php b/phpmyfaq/admin/ajax.user.php
@@ -143,6 +143,8 @@
                 if (strlen($userPassword) <= 7 || strlen($userPasswordConfirm) <= 7) {
                     $errorMessage[] = $PMF_LANG['ad_passwd_fail'];
                 }
+            } else {
+                $userPassword = ''; // set password to empty, so a new one is created
             }
 
             if (count($errorMessage) === 0) {