Do not allow to set too long password

We do not accept password longer than 256 chars, so do not accept it on
password change as well.

Signed-off-by: Michal Čihař <michal@cihar.com>

1 files changed, 3 insertions, 0 deletions

diff --git a/user_password.php b/user_password.php
index 6404623695..a68f3a8e4e 100644
--- a/user_password.php
+++ b/user_password.php
@@ -120,6 +120,9 @@ function PMA_setChangePasswordMsg()
                 __('The passwords aren\'t the same!')
             );
             $error = true;
+        } elseif (strlen($_REQUEST['pma_pw']) > 256) {
+            $message = PMA_Message::error(__('Password is too long!'));
+            $error = true;
         }
     }
     return array('error' => $error, 'msg' => $message);