diff --git a/LibreNMS/Authentication/AuthorizerBase.php b/LibreNMS/Authentication/AuthorizerBase.php index 24b3455f5..8207953bc 100644 --- a/LibreNMS/Authentication/AuthorizerBase.php +++ b/LibreNMS/Authentication/AuthorizerBase.php @@ -65,6 +65,9 @@ abstract class AuthorizerBase implements Authorizer */ public function logInUser() { + global $vars; + unset($vars['username']); + unset($vars['password']); // set up variables, but don't override existing ones (ad anonymous bind can only get user_id at login) if (!isset($_SESSION['userlevel'])) { $_SESSION['userlevel'] = $this->getUserlevel($_SESSION['username']);