Permalink
Browse files

MDL-32572 always lookpup passwords only in records from current auth …

…plugin

This bug should not be creating any problems thanks to our design of login process, but it should be fixed anyway.
  • Loading branch information...
1 parent 8e5440c commit b8bf75156fd0f89eeb160098185c589b5c7fe198 @skodak skodak committed with stronk7 Sep 18, 2012
Showing with 1 addition and 1 deletion.
  1. +1 −1 auth/db/auth.php
View
@@ -65,7 +65,7 @@ function user_login($username, $password) {
$authdb->Close();
// user exists externally
// check username/password internally
- if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id))) {
+ if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id, 'auth'=>$this->authtype))) {
return validate_internal_user_password($user, $password);
}
} else {

0 comments on commit b8bf751

Please sign in to comment.