grail/gralias
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: check user pass only if user exists

Browse Source
This commit is contained in:
Grail Finder
2025-07-09 15:39:11 +03:00
parent 2180f14850
commit a95dc82515
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
handlers/auth.go
View File

@@ -92,12 +92,13 @@ func HandleFrontLogin(w http.ResponseWriter, r *http.Request) {
log.Debug("making new player", "error", err, "state", userstate) log.Debug("making new player", "error", err, "state", userstate)
userstate = models.InitPlayer(cleanName) userstate = models.InitPlayer(cleanName)
makeplayer = true makeplayer = true
} } else {
if userstate.Password != clearPass { if userstate.Password != clearPass {
log.Error("wrong password", "username", cleanName, "password", clearPass) log.Error("wrong password", "username", cleanName, "password", clearPass)
abortWithError(w, "wrong password") abortWithError(w, "wrong password")
return return
} }
}
http.SetCookie(w, cookie) http.SetCookie(w, cookie)
fi := &models.FullInfo{ fi := &models.FullInfo{
State: userstate, State: userstate,