[VCL-96] < and > in user's passwords not handled properly

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0
• Fix Version/s: 2.1
• Component/s: web gui (frontend)
• Assignee: Josh Thompson
• Reporter: Josh Thompson
• Created: 18/Feb/09 15:06
• Updated: 18/Feb/09 16:04
• Resolved: 18/Feb/09 16:04

Description

processInputVar is called to get the submitted password someone enters. strip_tags is called in processInputVar which messes up any passwords containing < or >.