1 --- a/htdocs/login.php 2020-06-17 18:17:18.926320916 -0600
2 +++ b/htdocs/login.php 2020-06-17 18:16:59.796222429 -0600
5 $user['login'] = get_request('login');
6 $user['password'] = get_request('login_pass');
7 + $user['password'] = str_replace('&', '&', $user['password']);
9 if ($user['login'] && ! strlen($user['password']))