Prepend model alias for safety

cakephp · Nov 1, 2014 · 2995d93 · 2995d93
1 parent 417c137
commit 2995d93
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Cake/Controller/Component/Auth/BaseAuthenticate.php b/lib/Cake/Controller/Component/Auth/BaseAuthenticate.php
@@ -109,7 +109,7 @@ protected function _findUser($username, $password = null) {
 
 		$userFields = $this->settings['userFields'];
 		if ($password !== null && $userFields !== null) {
-			$userFields[] = $fields['password'];
+			$userFields[] = $model . '.' . $fields['password'];
 		}
 
 		$result = ClassRegistry::init($userModel)->find('first', array(