nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-05-31 03:34:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Ensure username comparison is fully case-insensitive.

Browse Source
This commit is contained in:
Andrew McMillan 2007-05-09 14:10:23 +12:00
parent 106b0f933d
commit 2598e489bb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
inc/BasicAuthSession.php
View File

@ -90,7 +90,7 @@ class BasicAuthSession {
return call_user_func( $c->authenticate_hook['call'], $username, $password ); return call_user_func( $c->authenticate_hook['call'], $username, $password );
} }
$qry = new PgQuery( "SELECT * FROM usr WHERE lower(username) = ? ", $username ); $qry = new PgQuery( "SELECT * FROM usr WHERE lower(username) = lower(?) ", $username );
if ( $qry->Exec('BasicAuth',__LINE__,__FILE__) && $qry->rows == 1 ) { if ( $qry->Exec('BasicAuth',__LINE__,__FILE__) && $qry->rows == 1 ) {
$usr = $qry->Fetch(); $usr = $qry->Fetch();
dbg_error_log( "BasicAuth", ":CheckPassword: Name:%s, Pass:%s, File:%s", $username, $password, $usr->password ); dbg_error_log( "BasicAuth", ":CheckPassword: Name:%s, Pass:%s, File:%s", $username, $password, $usr->password );