From 32706e97c7a1bf7deb33197ef583900fc18f559a Mon Sep 17 00:00:00 2001
From: Uriel <u@berlinblue.org>
Date: Sat, 28 Feb 2009 12:56:13 +0000
Subject: [PATCH] Be more careful when checking passwords, make sure that the
 password file exists and is not empty.

---
 bin/werclib.rc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/werclib.rc b/bin/werclib.rc
index 6a570c5..481b4a5 100644
--- a/bin/werclib.rc
+++ b/bin/werclib.rc
@@ -68,7 +68,7 @@ fn auth_user {
         status=('Auth: missing user name or pass: '^$"user_name^' / '^$"user_password)
     if not if(! test -f $pfile)
         status=('Auth: cant find '^$pfile)
-    if not if(! ~ $user_password `{cat $pfile})
+    if not if(! test -s $pfile || ! ~ $user_password `{cat $pfile})
         status=('Auth: Pass '$user_password' doesnt match '^`{cat $pfile})
     if not {
         logged_user=$user_name