Issue 949 blocking login by GET Method

git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10182 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ngleader 2012-02-24 01:29:38 +00:00
parent bf5df1f5e3
commit 19b655793e

View file

@ -18,6 +18,12 @@
* @brief Log-in by checking user_id and password
**/
function procMemberLogin($user_id = null, $password = null, $keep_signed = null) {
if(!$user_id && !$password && Context::getRequestMethod() == 'GET')
{
$this->setRedirectUrl(getNotEncodedUrl(''));
return new Object(-1, 'null_user_id');
}
// Variables
if(!$user_id) $user_id = Context::get('user_id');
$user_id = trim($user_id);