Merged change from STABLE, to fix possible $auth variable problem

moodle · Sep 27, 2004 · ce791f8 · ce791f8
1 parent 4037263
commit ce791f8
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/moodlelib.php b/lib/moodlelib.php
@@ -1208,6 +1208,10 @@ function authenticate_user_login($username, $password) {
         $auth = $user->auth;
     }
 
+    if (detect_munged_arguments($auth, 0)) {   // For safety on the next require
+        return false;
+    }
+
     if (!file_exists($CFG->dirroot .'/auth/'. $auth .'/lib.php')) {
         $auth = 'manual';    // Can't find auth module, default to internal
     }