Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated

1 files changed, 4 insertions, 4 deletions

diff --git a/etc/inc/ipsec.auth-user.php b/etc/inc/ipsec.auth-user.php
index 0bf702d..7fcf8c3 100755
--- a/etc/inc/ipsec.auth-user.php
+++ b/etc/inc/ipsec.auth-user.php
@@ -102,7 +102,7 @@ if (!$username || !$password) {
 		return;
 	} else {
 		closelog();
-		return (-1);
+		exit (-1);
 	}
 }
 
@@ -116,7 +116,7 @@ if (($strictusercn === true) && ($common_name != $username)) {
 		return;
 	} else {
 		closelog();
-		return (1);
+		exit (1);
 	}
 }
 
@@ -148,7 +148,7 @@ if ($authenticated == false) {
 		return;
 	} else {
 		closelog();
-		return (-1);
+		exit (-1);
 	}
 }
 
@@ -161,6 +161,6 @@ closelog();
 if (isset($_GET['username']))
 	echo "OK";
 else
-	return (0);
+	exit (0);
 
 ?>