瀏覽代碼

修复任意用户密码重置漏洞

tags/6.0.3
tianya 3 年之前
父節點
當前提交
5bf7f09f3c
共有 1 個檔案被更改,包括 1 行新增1 行删除
  1. +1
    -1
      src/member/resetpassword.php

+ 1
- 1
src/member/resetpassword.php 查看文件

@@ -68,7 +68,7 @@ if ($dopost == "") {
if (empty($safeanswer)) $safeanswer = '';
if ($row['safequestion'] == $safequestion && $row['safeanswer'] == $safeanswer) {
if ($row['safequestion'] === $safequestion && $row['safeanswer'] === $safeanswer) {
sn($mid, $row['userid'], $row['email'], 'N');
exit();
} else {


Loading…
取消
儲存