bugfix accept only check-login action

phpmob · Feb 5, 2018 · 3a434fe · 3a434fe
1 parent 9c31b55
commit 3a434fe
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Firewall/LoginFormAuthenicationListener.php b/Firewall/LoginFormAuthenicationListener.php
@@ -69,6 +69,10 @@ private function checkReCaptcha(Request $request)
             return false;
         }
 
+        if (!$request->request->has($this->options['username_parameter']) || !$request->request->has($this->options['password_parameter'])) {
+            return false;
+        }
+
         if (!$this->checker->isValid()) {
             $exception = new InvalidReCaptchaAuthenticationException('Invalid ReCaptch.');
             $exception->setErrors($this->checker->getErrors());