From 2e60a751181d706b2be1ea07c34838d14feb7136 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vilius=20=C5=A0umskas?= Date: Wed, 8 Mar 2023 22:41:16 +0200 Subject: [PATCH] Stop event propagation on empty username --- login-ldap.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/login-ldap.php b/login-ldap.php index 5ade99e..740a587 100644 --- a/login-ldap.php +++ b/login-ldap.php @@ -70,10 +70,11 @@ class LoginLDAPPlugin extends Plugin public function userLoginAuthenticate(UserLoginEvent $event) { $credentials = $event->getCredentials(); - - // empty username -> ignore + + // Fail early on empty username if($credentials['username'] == ''){ $event->setStatus($event::AUTHENTICATION_FAILURE); + $event->stopPropagation(); return; }