mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-03-08 17:59:55 +01:00
Code Issues Projects Releases Wiki Activity

See Bug

Browse Source
This commit is contained in:
fiedorow 2005-02-15 04:47:07 +00:00
parent 5718d0de3b
commit ea0329f4e3
1 changed files with 23 additions and 1 deletions

24
login/index.php

@ -43,10 +43,32 @@
$frm = false;
$user = false;
if ((!empty($SESSION->wantsurl) and strstr($SESSION->wantsurl,"username=guest")) or $loginguest) {
/// Log in as guest automatically (idea from Zbigniew Fiedorowicz)
$frm->username = "guest";
$frm->password = "guest";
} else if (!empty($SESSION->wantsurl) && $CFG->allowweblinktarget && preg_match('/username=([^&]+)\&clicktime=([^&]+)\&pwdauthentication=([^&]+)/',$SESSION->wantsurl,$target_matches)) {
//Handles the case of another Moodle site linking into a page on this site
$username = urldecode($target_matches[1]);
$clicktime = urldecode($target_matches[2]);
$pwdauthentication = urldecode($target_matches[3]);
$user = get_user_info_from_db("username", $username);
if ($user) {
$currentTime = time();
//guards against replay attacks
if (($currentTime < $clicktime) || ($currentTime - $clicktime>60)) {
$pwdauthentication = '';
}
if ((md5($username . $clicktime . $user->password) != $pwdauthentication)|| ($user->auth == 'disabled')) {
$user = false;
}
}
if ($user) {
$frm->username = $username;
} else {
$frm = data_submitted();
}
} else {
$frm = data_submitted();
}
@ -62,7 +84,7 @@
if (($frm->username == 'guest') and empty($CFG->guestloginbutton)) {
$user = false; /// Can't log in as guest if guest button is disabled
$frm = false;
} else {
} else if (!$user) {
$user = authenticate_user_login($frm->username, $frm->password);
}
update_login_count();