moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-05 17:06:53 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Undoing last checkin from Zig see bug #2542

Browse source
This commit is contained in:
moodler 2005-02-15 08:10:06 +00:00
parent ee7e04ec5d
commit cfbe930c03
1 changed files with 1 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

24
login/index.php
View file

@ -43,32 +43,10 @@
$frm = false; $frm = false;
$user = false;
if ((!empty($SESSION->wantsurl) and strstr($SESSION->wantsurl,"username=guest")) or $loginguest) { if ((!empty($SESSION->wantsurl) and strstr($SESSION->wantsurl,"username=guest")) or $loginguest) {
/// Log in as guest automatically (idea from Zbigniew Fiedorowicz) /// Log in as guest automatically (idea from Zbigniew Fiedorowicz)
$frm->username = "guest"; $frm->username = "guest";
$frm->password = "guest"; $frm->password = "guest";
} else if (!empty($SESSION->wantsurl) && $CFG->allowweblinktarget && preg_match('/username=([^&]+)\&clicktime=([^&]+)\&pwdauthentication=([^&]+)/',$SESSION->wantsurl,$target_matches)) {
//Handles the case of another Moodle site linking into a page on this site
$username = urldecode($target_matches[1]);
$clicktime = urldecode($target_matches[2]);
$pwdauthentication = urldecode($target_matches[3]);
$user = get_user_info_from_db("username", $username);
if ($user) {
$currentTime = time();
//guards against replay attacks
if (($currentTime < $clicktime) || ($currentTime - $clicktime>60)) {
$pwdauthentication = '';
}
if ((md5($username . $clicktime . $user->password) != $pwdauthentication)|| ($user->auth == 'disabled')) {
$user = false;
}
}
if ($user) {
$frm->username = $username;
} else {
$frm = data_submitted();
}
} else { } else {
$frm = data_submitted(); $frm = data_submitted();
} }
@ -84,7 +62,7 @@
if (($frm->username == 'guest') and empty($CFG->guestloginbutton)) { if (($frm->username == 'guest') and empty($CFG->guestloginbutton)) {
$user = false; /// Can't log in as guest if guest button is disabled $user = false; /// Can't log in as guest if guest button is disabled
$frm = false; $frm = false;
} else if (!$user) { } else {
$user = authenticate_user_login($frm->username, $frm->password); $user = authenticate_user_login($frm->username, $frm->password);
} }
update_login_count(); update_login_count();