From: Jérôme Date: Tue, 22 Mar 2016 09:10:42 +0000 (+0000) Subject: Merge branch 'master' into 'master' X-Git-Tag: 1.2.0~36^2 X-Git-Url: https://git.p6c8.net/jirafeau.git/commitdiff_plain/6564589a47862c108fa27f7be51ddf9f52011e80 Merge branch 'master' into 'master' admin.php: fix authentication bypass vulnerability An attacker ban bypass the authentication form by passing an array instead of a string (https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet#Input_handling). The identity operator should fix the vulnerability. See merge request !13 --- 6564589a47862c108fa27f7be51ddf9f52011e80