MDL-32572 always lookpup passwords only in records from current auth plugin

This bug should not be creating any problems thanks to our design of login process, but it should be fixed anyway.
2012-09-18 12:29:13 +02:00
parent c8ac480979
commit a0a5ca2578
1 changed files with 1 additions and 1 deletions
@@ -65,7 +65,7 @@ class auth_plugin_db extends auth_plugin_base {
                $authdb->Close();
                // user exists externally
                // check username/password internally
-                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id))) {
+                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id, 'auth'=>$this->authtype))) {
                    return validate_internal_user_password($user, $password);
                }
            } else {