diff --git a/action.php b/action.php index 5653cad5c..3f7bdcf4a 100644 --- a/action.php +++ b/action.php @@ -39,7 +39,7 @@ foreach ($reqs as $reqData) { switch (@$reqData['act']) { case 'login': - if (!$_POST) die(); + if (!$_POST || empty($reqData['name']) || empty($reqData['pass'])) die(); $users->login($reqData['name'], $reqData['pass']); unset($curuser['userdata']); $out['curuser'] = $curuser;