auth_internal: cast OTP code to integer before trying to check it

4 years ago · d8619b9a84
parent c25edd0024
commit d8619b9a84
1 changed files with 1 additions and 1 deletions
--- a/plugins/auth_internal/init.php
+++ b/plugins/auth_internal/init.php
@ -22,7 +22,7 @@ class Auth_Internal extends Plugin implements IAuthModule {

 		$pwd_hash1 = encrypt_password($password);
 		$pwd_hash2 = encrypt_password($password, $login);
-		$otp = $_REQUEST["otp"];
+		$otp = (int)$_REQUEST["otp"];

 		if (get_schema_version() > 96) {