diff options
| author | Andrew Dolgov <[email protected]> | 2021-02-11 09:57:57 +0300 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2021-02-11 09:57:57 +0300 |
| commit | 7af8744c856545f62a2f24fd1a700f40b90b8e37 (patch) | |
| tree | b030aab53c9b9bbf42ef90d7a8d51363d22670f1 /classes/auth | |
| parent | e7e73193feaef2d74ec2a7a203d2f56fdf3082fe (diff) | |
authentication: make logins case-insensitive (force lowercase)
Diffstat (limited to 'classes/auth')
| -rw-r--r-- | classes/auth/base.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/classes/auth/base.php b/classes/auth/base.php index 1b9015fe3..1d68ae537 100644 --- a/classes/auth/base.php +++ b/classes/auth/base.php @@ -27,7 +27,7 @@ abstract class Auth_Base extends Plugin implements IAuthModule { $sth = $this->pdo->prepare("INSERT INTO ttrss_users (login,access_level,last_login,created,pwd_hash,salt) - VALUES (?, 0, null, NOW(), ?,?)"); + VALUES (LOWER(?), 0, null, NOW(), ?,?)"); $sth->execute([$login, $pwd_hash, $salt]); return $this->find_user_by_login($login); @@ -42,7 +42,7 @@ abstract class Auth_Base extends Plugin implements IAuthModule { function find_user_by_login($login) { $sth = $this->pdo->prepare("SELECT id FROM ttrss_users WHERE - login = ?"); + LOWER(login) = LOWER(?)"); $sth->execute([$login]); if ($row = $sth->fetch()) { |