diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2015-06-07 14:57:06 +0200 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2015-06-07 14:57:06 +0200 |
| commit | bac02a348ee765dd7000108a0933ed03561aaecc (patch) | |
| tree | 5898fcc4258ab312b365dd4f18ceaa67a9dec538 /phpBB/includes/functions_acp.php | |
| parent | 99d399554866d752b59082a5f4c63ff6f4ae6d54 (diff) | |
| parent | 78b0c938a25316be1228c3e8117ef7dd859821d7 (diff) | |
| download | forums-bac02a348ee765dd7000108a0933ed03561aaecc.tar forums-bac02a348ee765dd7000108a0933ed03561aaecc.tar.gz forums-bac02a348ee765dd7000108a0933ed03561aaecc.tar.bz2 forums-bac02a348ee765dd7000108a0933ed03561aaecc.tar.xz forums-bac02a348ee765dd7000108a0933ed03561aaecc.zip | |
Merge pull request #22 from phpbb/ticket/sec-184
[ticket/sec-184] Do not output passwords to HTML
Diffstat (limited to 'phpBB/includes/functions_acp.php')
| -rw-r--r-- | phpBB/includes/functions_acp.php | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/phpBB/includes/functions_acp.php b/phpBB/includes/functions_acp.php index a53a54368e..d566336d26 100644 --- a/phpBB/includes/functions_acp.php +++ b/phpBB/includes/functions_acp.php @@ -245,8 +245,13 @@ function build_cfg_template($tpl_type, $key, &$new, $config_key, $vars) switch ($tpl_type[0]) { - case 'text': case 'password': + if ($new[$config_key] !== '') + { + // replace passwords with asterixes + $new[$config_key] = '********'; + } + case 'text': case 'url': case 'email': case 'color': |