diff --git a/html/user/lookup_account.php b/html/user/lookup_account.php index f35847d6c9..67e53c6613 100644 --- a/html/user/lookup_account.php +++ b/html/user/lookup_account.php @@ -76,12 +76,11 @@ if (LDAP_HOST && $ldap_auth) { // if the given password hash matches (auth+email), accept it // - if ($user->passwd_hash == $passwd_hash || $auth_hash == $passwd_hash) { - echo "\n"; - echo "$user->authenticator\n"; - echo "\n"; - } else { + if ($user->passwd_hash != $passwd_hash && $auth_hash != $passwd_hash) { xml_error(ERR_BAD_PASSWD); } } +echo "\n"; +echo "$user->authenticator\n"; +echo "\n"; ?>