Fixed a bug that allowed too many wrong answers

16 years ago · 0bf13da212
parent 3af9ad348e
commit 0bf13da212
1 changed files with 1 additions and 1 deletions
--- a/www/index.php
+++ b/www/index.php
@ -93,7 +93,7 @@
 		$_SESSION['lostpw']['pw1'] = trim(mysql_escape_string(stripslashes(strip_tags($_REQUEST['newpass1']))));
 		$_SESSION['lostpw']['pw2'] = trim(mysql_escape_string(stripslashes(strip_tags($_REQUEST['newpass2']))));

-		if($answers < $_SESSION['lostpw']['total'] || $answers < 1)
+		if($answers < $_SESSION['lostpw']['total'] || $answers < 3)
 		{
 			$body = "Someone has just attempted to update the pass phrase on the following account:\n".
 				"Username(ID): ".$_SESSION['lostpw']['user']['email']."(".$_SESSION['lostpw']['user']['id'].")\n".