From 50709a34f01788ed4d07b8d87e194b6f5cb23a75 Mon Sep 17 00:00:00 2001
From: Martin Ambrus <martin@martinambrus.com>
Date: Fri, 1 Dec 2017 19:55:24 +0100
Subject: [PATCH] fix: wrong password verify check allows for any login

---
 GameEngine/Account.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/GameEngine/Account.php b/GameEngine/Account.php
index e498ee17..b730be41 100755
--- a/GameEngine/Account.php
+++ b/GameEngine/Account.php
@@ -218,6 +218,8 @@ class Account {
 
                 if ( $activateData != "" ) {
                     $form->addError( "activate", $_POST['user'] );
+                } else {
+                    $form->addError("pw",LOGIN_PW_ERROR);
                 }
             } else {
                 $form->addError("pw",LOGIN_PW_ERROR);