exatorrent
exatorrent copied to clipboard
Less then 6 digit password is allowed
Hi, I am using latest exatorrent image (ghcr.io/varbhat/exatorrent:latest) and it seems like it allows less then 6 digit password if username length is more than 5:
internal/core/socket.go
case "adduser":
if !(len(req.Data1) > 5 || len(req.Data2) > 5) {
_ = uc.SendMsg("resp", "error", "length of username and password must be more than 5")
return
}
Adding such user gives "Error Adding User to Database" error - not much explanatory..
Also, changing logged in user to 5 digit password (with legit 6 char username) disconnects users and makes it unable to log in.
Thanks, Maksym
@johnatank , Thanks for reporting it. I will look into it.