no use the recoveryPassword var instead of accessing the POST array

13 years ago · f56802a437
parent 4911305887
commit f56802a437
1 changed files with 1 additions and 1 deletions
--- a/apps/files_encryption/lib/helper.php
+++ b/apps/files_encryption/lib/helper.php
@ -146,7 +146,7 @@ class Helper

 		} else { // get recovery key and check the password
 			$util = new \OCA\Encryption\Util( new \OC_FilesystemView( '/' ), \OCP\User::getUser() );
-			$return = $util->checkRecoveryPassword( $_POST['recoveryPassword'] );
+			$return = $util->checkRecoveryPassword( $recoveryPassword );
 			if ( $return ) {
 				\OC_Appconfig::setValue( 'files_encryption', 'recoveryAdminEnabled', 1 );
 			}