Skip to content

bugzilla
bugzilla
Commit 0c8cd681 authored by terry%mozilla.org's avatar terry%mozilla.org
Browse files
Options

Make sure login name is in canonical form.

parent 9c5e52a4
Show whitespace changes
Inline Side-by-side
Showing with 5 additions and 2 deletions
CGI.pl
View file @ 0c8cd681
...@@ -282,7 +282,8 @@ sub quietly_check_login() { ...@@ -282,7 +282,8 @@ sub quietly_check_login() {
if (defined $::COOKIE{"Bugzilla_login"} && if (defined $::COOKIE{"Bugzilla_login"} &&
defined $::COOKIE{"Bugzilla_logincookie"}) { defined $::COOKIE{"Bugzilla_logincookie"}) {
ConnectToDatabase(); ConnectToDatabase();
SendSQL("select profiles.groupset, profiles.login_name = " . SendSQL("select profiles.groupset, profiles.login_name, " .
"profiles.login_name = " .
SqlQuote($::COOKIE{"Bugzilla_login"}) . SqlQuote($::COOKIE{"Bugzilla_login"}) .
" and profiles.cryptpassword = logincookies.cryptpassword " . " and profiles.cryptpassword = logincookies.cryptpassword " .
"and logincookies.hostname = " . "and logincookies.hostname = " .
...@@ -292,9 +293,11 @@ sub quietly_check_login() { ...@@ -292,9 +293,11 @@ sub quietly_check_login() {
" and profiles.userid = logincookies.userid"); " and profiles.userid = logincookies.userid");
my @row; my @row;
if (@row = FetchSQLData()) { if (@row = FetchSQLData()) {
$loginok = $row[1]; $loginok = $row[2];
if ($loginok) { if ($loginok) {
$::usergroupset = $row[0]; $::usergroupset = $row[0];
$::COOKIE{"Bugzilla_login"} = $row[1]; # Makes sure case is in
# canonical form.
} }
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment