Less then 6 digit password is allowed

[johnatank]

Hi,
I am using latest exatorrent image (ghcr.io/varbhat/exatorrent:latest) and it seems like it allows less then 6 digit password if username length is more than 5:

internal/core/socket.go

                case "adduser":
                        if !(len(req.Data1) > 5 || len(req.Data2) > 5) {
                                _ = uc.SendMsg("resp", "error", "length of username and password must be more than 5")
                                return
                        }

Adding such user gives "Error Adding User to Database" error - not much explanatory..

Also, changing logged in user to 5 digit password (with legit 6 char username) disconnects users and makes it unable to log in.

Thanks,
Maksym

[varbhat]

@johnatank , Thanks for reporting it. I will look into it.