dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Another case where automcomplete bombs. Accounts -> Extensions password is used for registration not for a login. In FusionPBX if the password is left empty it would automatically create a new password. However auto complete instead puts in the login password this is an undesirable bug that this update fixes by adding a honey pot for the password.

Browse Source
This commit is contained in:
markjcrane
2015-09-19 18:19:23 -06:00
parent 969e02328e
commit a4b7af3560
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/extensions/extension_edit.php
+3 -2
View File
@@ -982,7 +982,8 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
echo "}\n"; echo "}\n";
echo "</script>"; echo "</script>";
echo "<form method='post' name='frm' action=''>\n"; echo "<form method='post' name='frm' action='' autocomplete='off'>\n";
echo "<input style='display:none;' type='password' name='autocomplete'>";
echo "<table width='100%' border='0' cellpdding='0' cellspacing='0'>\n"; echo "<table width='100%' border='0' cellpdding='0' cellspacing='0'>\n";
echo "<tr>\n"; echo "<tr>\n";
if ($action == "add") { if ($action == "add") {
@@ -1042,7 +1043,7 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
echo " ".$text['label-password']."\n"; echo " ".$text['label-password']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='password' name='password' id='password' onmouseover=\"this.type='text';\" onfocus=\"this.type='text';\" onmouseout=\"if (!$(this).is(':focus')) { this.type='password'; }\" onblur=\"this.type='password';\" autocomplete='off' maxlength='50' value=\"$password\">\n"; echo " <input class='formfld' type='password' name='password' id='password' onmouseover=\"this.type='text';\" onfocus=\"this.type='text';\" onmouseout=\"if (!$(this).is(':focus')) { this.type='password'; }\" onblur=\"this.type='password';\" maxlength='50' value=\"$password\">\n";
echo " <br />\n"; echo " <br />\n";
echo " ".$text['description-password']."\n"; echo " ".$text['description-password']."\n";
echo "</td>\n"; echo "</td>\n";