Fixed the case where a user would manually log in with an unknown username

This commit is contained in:
exe-cutor 2006-04-12 14:54:01 +00:00
parent 32346db21f
commit f26baa3e2b

View File

@ -8,17 +8,13 @@ function auth_user_login($username, $password) {
$pluginconfig = get_config('auth/shibboleth');
/// If we are in the shibboleth directory then we trust the server var
// If we are in the shibboleth directory then we trust the server var
if (!empty($_SERVER[$pluginconfig->shib_user_attribute])) {
return ($_SERVER[$pluginconfig->shib_user_attribute] == $username);
} else {
/// If we are not, then the server is probably set to not be Shibboleth-only
/// and the user has used the normal login screen, so we redirect to the shibboleth
/// directory for a proper check
redirect($CFG->wwwroot.'/auth/shibboleth/index.php');
/// There's no point doing anything further here
exit;
// If we are not, the user has used the manual login and the login name is
// unknown, so we return false.
return false;
}
}