From: Alan Knowles <alan@roojs.com>
Date: Fri, 12 Oct 2018 02:20:29 +0000 (+0800)
Subject: Pman/Login.php
X-Git-Url: http://git.roojs.org/?p=Pman.Base;a=commitdiff_plain;h=ea4e785c5702cf9d9a0a541317a3d18505959db2

Pman/Login.php
---

diff --git a/Pman/Login.php b/Pman/Login.php
index f0c30aa..72ce4fe 100644
--- a/Pman/Login.php
+++ b/Pman/Login.php
@@ -328,9 +328,11 @@ class Pman_Login extends Pman
         
         if(
             !empty($u->oath_key) &&
-	    empty($_REQUEST['oath_password']) &&
-            !$u->checkTwoFactorAuthentication($_REQUEST['oath_password'])
-        ){
+	    (
+		empty($_REQUEST['oath_password']) ||
+		!$u->checkTwoFactorAuthentication($_REQUEST['oath_password'])
+	    )
+        ) {
             $this->jerror('LOGIN-BAD', 'You typed the wrong Username or Password  (3)');
             exit;
         }