Browse Source

pref_users: do not escape password to prevent special character
mishandling; remove inconsistent trimming of passwords

Andrew Dolgov 11 years ago
parent
commit
c72069b098
1 changed files with 1 additions and 1 deletions
  1. 1 1
      classes/pref/users.php

+ 1 - 1
classes/pref/users.php

@@ -203,7 +203,7 @@ class Pref_Users extends Handler_Protected {
 			$uid = db_escape_string($this->link, $_REQUEST["id"]);
 			$access_level = (int) $_REQUEST["access_level"];
 			$email = db_escape_string($this->link, trim($_REQUEST["email"]));
-			$password = db_escape_string($this->link, trim($_REQUEST["password"]));
+			$password = $_REQUEST["password"];
 
 			if ($password) {
 				$salt = substr(bin2hex(get_random_bytes(125)), 0, 250);