summaryrefslogtreecommitdiff
path: root/FS/FS/svc_acct.pm
diff options
context:
space:
mode:
authorJonathan Prykop <jonathan@freeside.biz>2015-12-07 17:46:45 -0600
committerJonathan Prykop <jonathan@freeside.biz>2015-12-14 20:22:22 -0600
commit5a813d91f3d4b1c6eff81dfa9c88e2b587442984 (patch)
tree69b4dd20858c739a07959c887c06bc9b36486f82 /FS/FS/svc_acct.pm
parent8cd6e05d5d906da6b001b36bab5aa87ecdfca944 (diff)
RT#29354: Password Security in Email [customer fields, images, js files]
Diffstat (limited to 'FS/FS/svc_acct.pm')
-rw-r--r--FS/FS/svc_acct.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/FS/FS/svc_acct.pm b/FS/FS/svc_acct.pm
index 38cebc1..53b12f1 100644
--- a/FS/FS/svc_acct.pm
+++ b/FS/FS/svc_acct.pm
@@ -2686,6 +2686,7 @@ sub password_svc_check {
my ($self, $password) = @_;
foreach my $field ( qw(username finger) ) {
foreach my $word (split(/\W+/,$self->get($field))) {
+ next unless length($word) > 2;
if ($password =~ /$word/i) {
return qq(Password contains account information '$word');
}