← Back to team overview

phpdevshell team mailing list archive

[Bug 1020928] Re: PluggableAuth crashes if the entered password was wrong

 

In fact the problem was a typo:
if (is_a($auth, 'iAUTH_plugin') && ($plugin->lookupUser(array('username' => $username, 'password' => $password)))) {
instead of
if (is_a($plugin, 'iAUTH_plugin') && ($plugin->lookupUser(array('username' => $username, 'password' => $password)))) {


Fixed at rev 910.

** Changed in: phpdevshell
       Status: New => Fix Committed

** Changed in: phpdevshell
     Assignee: (unassigned) => Greg (gregfr)

** Changed in: phpdevshell
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of
PHPDevShell, which is subscribed to PHPDevShell.
https://bugs.launchpad.net/bugs/1020928

Title:
  PluggableAuth crashes if the entered password was wrong

Status in Open Source PHP RAD Framework with UI.:
  Fix Committed

Bug description:
  Fix ("/PluggableAuth/includes/AUTH_login.class.php", line 83):

  /**
   * @author Adrian Liechti
   * If the Passwort does not have a length of 32 chars, it must be a Source.
   * 
   * If the Password does have a length of 32 chars, the login has failed
   * because it was checked before, it has to be a wrong Password.
   * 
   * @important This means that a Source must not have a name with a lengt of 32 chars.
   */
  if (strlen($source) !== 32) {
  	$plugin = $this->getAuthPlugin($source);
  	if ($plugin->lookupUser(array('username' => $username, 'password' => $password))) {
  		return $user;
  	}
  }

To manage notifications about this bug go to:
https://bugs.launchpad.net/phpdevshell/+bug/1020928/+subscriptions


References