From ea4e785c5702cf9d9a0a541317a3d18505959db2 Mon Sep 17 00:00:00 2001
From: Alan Knowles <alan@roojs.com>
Date: Fri, 12 Oct 2018 10:20:29 +0800
Subject: [PATCH] Pman/Login.php

---
 Pman/Login.php | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/Pman/Login.php b/Pman/Login.php
index f0c30aa..72ce4fe 100644
--- a/Pman/Login.php
+++ b/Pman/Login.php
@@ -328,9 +328,11 @@ class Pman_Login extends Pman
         
         if(
             !empty($u->oath_key) &&
-	    empty($_REQUEST['oath_password']) &&
-            !$u->checkTwoFactorAuthentication($_REQUEST['oath_password'])
-        ){
+	    (
+		empty($_REQUEST['oath_password']) ||
+		!$u->checkTwoFactorAuthentication($_REQUEST['oath_password'])
+	    )
+        ) {
             $this->jerror('LOGIN-BAD', 'You typed the wrong Username or Password  (3)');
             exit;
         }
-- 
2.39.2