Page 2 of 2

Re: [HACK] Customers copy/pasting passwords

Posted: Thu Nov 15, 2012 8:55 pm
by Martin
Small update to this that deals with customers who have somehow included spaces before their email address..

Open: /includes/classes/class.customer.php

Find:

Code: Select all

$email = $GLOBALS['ISC_CLASS_DB']->Quote($_POST['login_email']);
Replace with:

Code: Select all

$email = $GLOBALS['ISC_CLASS_DB']->Quote(trim($_POST['login_email']));

This helps deal with a common issue I get with customers who seem to have auto-form-filling utilities for some reason..