MDL-9166 auth plugins can prevent showing of last logged in user; merged from MOODLE_18_STABLE

2007-04-02 09:26:07 +00:00
parent 651268e00e
commit 3f6941a655
1 changed files with 8 additions and 1 deletions
@@ -165,7 +165,14 @@ httpsrequired();


            update_user_login_times();
-            set_moodle_cookie($USER->username);
+            if (empty($CFG->nolastloggedin)) {
+                set_moodle_cookie($USER->username);
+            } else {
+                // do not store last logged in user in cookie
+                // auth plugins can temporarily override this from loginpage_hook()
+                // do not save $CFG->nolastloggedin in database!
+                set_moodle_cookie('nobody');
+            }
            set_login_session_preferences();

            /// This is what lets the user do anything on the site :-)