added a extra level of protection for long passwords, even if IS_LENGTH validator is missing

2013-09-15 09:40:15 -05:00
parent b0f6dc4e16
commit 7dafb07438
3 changed files with 5 additions and 4 deletions
@@ -108,7 +108,7 @@ def index():
    if session.authorized:
        redirect(send)
    elif request.vars.password:
-        if verify_password(request.vars.password):
+        if verify_password(request.vars.password[:1024]):
            session.authorized = True
            login_record(True)