aboutsummaryrefslogtreecommitdiffstats
path: root/plugins/muc
diff options
context:
space:
mode:
authorMichel Le Bihan <michel@lebihan.pl>2018-10-09 18:42:19 +0200
committerMichel Le Bihan <michel@lebihan.pl>2018-10-09 18:42:19 +0200
commit5111187c2e894c17f3b248f27a63b8f8c58c443a (patch)
treecd97b4a25d6da9af67fa45757e9a9ca054c12eba /plugins/muc
parent7896ef03a99c9f848a6301e2b1ee0c762b6268a1 (diff)
downloadprosody-5111187c2e894c17f3b248f27a63b8f8c58c443a.tar.gz
prosody-5111187c2e894c17f3b248f27a63b8f8c58c443a.zip
MUC: Check that a room password is set before verifying password supplied by user
Diffstat (limited to 'plugins/muc')
-rw-r--r--plugins/muc/password.lib.lua1
1 files changed, 1 insertions, 0 deletions
diff --git a/plugins/muc/password.lib.lua b/plugins/muc/password.lib.lua
index 36a2ec6f..1f4b2add 100644
--- a/plugins/muc/password.lib.lua
+++ b/plugins/muc/password.lib.lua
@@ -42,6 +42,7 @@ end);
-- Don't allow anyone to join room unless they provide the password
module:hook("muc-occupant-pre-join", function(event)
local room, stanza = event.room, event.stanza;
+ if not get_password(room) then return end
local muc_x = stanza:get_child("x", "http://jabber.org/protocol/muc");
if not muc_x then return end
local password = muc_x:get_child_text("password", "http://jabber.org/protocol/muc");