exatorrent icon indicating copy to clipboard operation
exatorrent copied to clipboard

Less then 6 digit password is allowed

Open mprokopiev opened this issue 3 years ago • 1 comments

Hi, I am using latest exatorrent image (ghcr.io/varbhat/exatorrent:latest) and it seems like it allows less then 6 digit password if username length is more than 5:

internal/core/socket.go

                case "adduser":
                        if !(len(req.Data1) > 5 || len(req.Data2) > 5) {
                                _ = uc.SendMsg("resp", "error", "length of username and password must be more than 5")
                                return
                        }

Adding such user gives "Error Adding User to Database" error - not much explanatory..

Also, changing logged in user to 5 digit password (with legit 6 char username) disconnects users and makes it unable to log in.

Thanks, Maksym

mprokopiev avatar Jun 20 '22 12:06 mprokopiev

@johnatank , Thanks for reporting it. I will look into it.

varbhat avatar Jun 20 '22 12:06 varbhat