nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-04-20 14:20:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Inactive users should not still be able to access their calendars.

Browse Source
This commit is contained in:
Andrew McMillan 2010-04-13 03:45:00 +12:00
parent dca93db8ed
commit 8958e99d37
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
inc/HTTPAuthSession.php
View File

@ -233,8 +233,8 @@ class HTTPAuthSession {
}
if ( $usr = getUserByName($username) ) {
dbg_error_log( "BasicAuth", ":CheckPassword: Name:%s, Pass:%s, File:%s", $username, $password, $usr->password );
if ( session_validate_password( $password, $usr->password ) ) {
dbg_error_log( "BasicAuth", ":CheckPassword: Name:%s, Pass:%s, File:%s, Active:%s", $username, $password, $usr->password, ($usr->active?'Yes':'No') );
if ( $usr->active && session_validate_password( $password, $usr->password ) ) {
return $usr;
}
}