From a0a5ca25788929697d43e8a01952fc4084dd319c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20S=CC=8Ckoda?= <commits@skodak.org>
Date: Tue, 18 Sep 2012 12:29:13 +0200
Subject: [PATCH] MDL-32572 always lookpup passwords only in records from
 current auth plugin

This bug should not be creating any problems thanks to our design of login process, but it should be fixed anyway.
---
 auth/db/auth.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth/db/auth.php b/auth/db/auth.php
index f72b318d3fc..1fdf1e2f7f5 100644
--- a/auth/db/auth.php
+++ b/auth/db/auth.php
@@ -65,7 +65,7 @@ class auth_plugin_db extends auth_plugin_base {
                 $authdb->Close();
                 // user exists externally
                 // check username/password internally
-                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id))) {
+                if ($user = $DB->get_record('user', array('username'=>$username, 'mnethostid'=>$CFG->mnet_localhost_id, 'auth'=>$this->authtype))) {
                     return validate_internal_user_password($user, $password);
                 }
             } else {