Stop event propagation on empty username

2023-03-08 22:41:16 +02:00
parent 3998a5063e
commit 2e60a75118
1 changed files with 3 additions and 2 deletions
--- a/login-ldap.php
+++ b/login-ldap.php
@@ -70,10 +70,11 @@ class LoginLDAPPlugin extends Plugin
    public function userLoginAuthenticate(UserLoginEvent $event)
    {
        $credentials = $event->getCredentials();
-        
-        // empty username -> ignore
+
+        // Fail early on empty username
        if($credentials['username'] == ''){
            $event->setStatus($event::AUTHENTICATION_FAILURE);
+            $event->stopPropagation();
            return;
        }