Dev: secure beforeLogin too (uneeded, but better)

LimeSurvey · Jul 29, 2022 · eead6f5 · eead6f5
1 parent c0e25d4
commit eead6f5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/application/core/plugins/Authwebserver/Authwebserver.php b/application/core/plugins/Authwebserver/Authwebserver.php
@@ -78,13 +78,14 @@ public function beforeLogin()
             if (isset($aUserMappings[$sUser])) {
                 $sUser = $aUserMappings[$sUser];
             }
+            $authEvent = $this->getEvent();
             $oUser = $this->api->getUserByName($sUser);
             if (
                 ($oUser && Permission::model()->hasGlobalPermission('auth_webserver', 'read', $oUser->uid))
                 || (!$oUser && $this->api->getConfigKey('auth_webserver_autocreate_user'))
             ) {
                 $this->setUsername($sUser);
-                $this->setAuthPlugin(); // This plugin handles authentication, halt further execution of auth plugins
+                $this->setAuthPlugin($beforeLoginEvent); // This plugin handles authentication, halt further execution of auth plugins
                 return;
             }
         }