From 7cf0fa7284341e3ae6da41a5f95677b241cb500f Mon Sep 17 00:00:00 2001
From: "Florian Aders (EleRas)" <eleras@froxlor.org>
Date: Thu, 23 Jun 2011 11:02:16 +0200
Subject: [PATCH] Destroy session if password was entered wrong in webftp, refs
 #819

Signed-off-by: Florian Aders (EleRas) <eleras@froxlor.org>
---
 webftp.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/webftp.php b/webftp.php
index 32c4bc0a..324d9e19 100644
--- a/webftp.php
+++ b/webftp.php
@@ -961,6 +961,7 @@ elseif ((!empty($_POST['loginname']) && !empty($_POST['password'])) || (!empty($
 	else
 	{
 		$smarty->assign('errormessage', _('Login failed, please try again'));
+		session_destroy();
 		$body = $smarty->fetch('login/login_ftp.tpl');
 	}
 }