Fix valid user password when username doesn't exists - refs #7338

10 years ago · 8220115c70
parent fe8646d7ef
commit 8220115c70
1 changed files with 4 additions and 0 deletions
--- a/main/inc/lib/webservices/WebService.class.php
+++ b/main/inc/lib/webservices/WebService.class.php
@ -49,6 +49,10 @@ abstract class WebService
            'username' => $username
        ]);

+        if (empty($user)) {
+            return false;
+        }
+
        return UserManager::isPasswordValid($password, $user);
    }