MDL-50090 user: suspended user can login upon conrimation

moodle · May 6, 2015 · f236dcc · f236dcc
1 parent c4a1502
commit f236dcc
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/login/confirm.php b/login/confirm.php
@@ -77,14 +77,16 @@
             print_error('cannotfinduser', '', '', s($username));
         }
 
-        complete_user_login($user);
+        if (!$user->suspended) {
+            complete_user_login($user);
 
-        \core\session\manager::apply_concurrent_login_limit($user->id, session_id());
+            \core\session\manager::apply_concurrent_login_limit($user->id, session_id());
 
-        if ( ! empty($SESSION->wantsurl) ) {   // Send them where they were going
-            $goto = $SESSION->wantsurl;
-            unset($SESSION->wantsurl);
-            redirect($goto);
+            if ( ! empty($SESSION->wantsurl) ) {   // Send them where they were going.
+                $goto = $SESSION->wantsurl;
+                unset($SESSION->wantsurl);
+                redirect($goto);
+            }
         }
 
         $PAGE->navbar->add(get_string("confirmed"));