From 72b41372df1081ee6dc758e3aa4b40639044de54 Mon Sep 17 00:00:00 2001 From: Abd El Date: Wed, 4 Jan 2023 12:21:20 +0100 Subject: [PATCH] Update login.inc.php URL-Decode Password to support special characters --- includes/login.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/login.inc.php b/includes/login.inc.php index 8cfb26d..0bdcafc 100644 --- a/includes/login.inc.php +++ b/includes/login.inc.php @@ -111,7 +111,7 @@ function authCookie() // Login form submitted; correctly? if (isset($config['login'][$_POST['username']])) { $userData = $config['login'][$_POST['username']]; - if ($_POST['password'] === $userData['password']) { + if (urldecode($_POST['password']) === $userData['password']) { // Correct username & password. Set cookie and redirect to home page $cookieValue = $_POST['username'] . ':' . $generateCookieHash($_POST['username']); setcookie('phpRedisAdminLogin', $cookieValue);