From 8964c5068cec5d56ef5107c4cbcb10e55e4ef4a5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rn=20Friedrich=20Dreyer?= <jfd@butonic.de>
Date: Tue, 31 Mar 2015 14:56:02 +0200
Subject: [PATCH] do not disclose information, show generic error on login page

Conflicts:
	core/templates/login.php
	lib/base.php
---
 core/templates/login.php | 6 ++++++
 lib/base.php             | 4 ++++
 2 files changed, 10 insertions(+)

diff --git a/core/templates/login.php b/core/templates/login.php
index 0ef7882d4b..b24c9cb07d 100644
--- a/core/templates/login.php
+++ b/core/templates/login.php
@@ -24,6 +24,12 @@ script('core', [
 				<?php p($message); ?><br>
 			</div>
 		<?php endforeach; ?>
+		<?php if (isset($_['internalexception']) && ($_['internalexception'])): ?>
+			<div class="warning">
+				<?php p($l->t('An internal error occured.')); ?><br>
+				<small><?php p($l->t('Please try again or contact your administrator.')); ?></small>
+			</div>
+		<?php endif; ?>
 		<p id="message" class="hidden">
 			<img class="float-spinner" alt=""
 				src="<?php p(\OCP\Util::imagePath('core', 'loading-dark.gif'));?>">
diff --git a/lib/base.php b/lib/base.php
index 042419eff1..82282c7dab 100644
--- a/lib/base.php
+++ b/lib/base.php
@@ -957,6 +957,10 @@ class OC {
 			}
 		} catch (\OC\User\LoginException $e) {
 			$messages[] = $e->getMessage();
+		} catch (\Exception $ex) {
+			\OCP\Util::logException('handleLogin', $ex);
+			// do not disclose information. show generic error
+			$error[] = 'internalexception';
 		}
 
 		OC_Util::displayLoginPage(array_unique($error), $messages);