MDL-32572 always lookpup passwords only in records from current auth …

…plugin This bug should not be creating any problems thanks to our design of login process, but it should be fixed anyway.
moodle · Sep 18, 2012 · 45a6d31 · 45a6d31
1 parent 32efb09
commit 45a6d31
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/auth/db/auth.php b/auth/db/auth.php
@@ -65,7 +65,7 @@ function user_login($username, $password) {
                 $authdb->Close();
                 // user exists externally
                 // check username/password internally
-                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id))) {
+                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id, 'auth'=>$this->authtype))) {
                     return validate_internal_user_password($user, $password);
                 }
             } else {