Download | Plain Text | No Line Numbers 

  1. --- html/login.php	2008-07-24 16:57:13.000000000 +0200
  2. +++ html/login.php.orig	2011-10-11 18:18:00.000000000 +0200
  3. @@ -188,9 +188,16 @@
  4.  # fixed $ServerID, $user_prefix, $hostname, $master_confixx
  5.  #
  6.  
  7. +    /* don't store password in session unless necessary */
  8. +    if (!in_array($_POST['_cat'], array("ftp", "pop3")))
  9. +        $_POST['password'] = "";
  10. +
  11.      addSUser( $account_info['login'],
  12.  							$_POST['password'],
  13.  							$account_info['type'] );
  14. +
  15. +    /* delete password */
  16. +    $_POST['password'] = "";
  17.  
  18.      if( $account_info['type'] == USERTYPE_MASTER ){
  19.  
  20.