From 7af8744c856545f62a2f24fd1a700f40b90b8e37 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Thu, 11 Feb 2021 09:57:57 +0300
Subject: authentication: make logins case-insensitive (force lowercase)

---
 classes/api.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'classes/api.php')

diff --git a/classes/api.php b/classes/api.php
index 43cefef8f..7e4691b32 100755
--- a/classes/api.php
+++ b/classes/api.php
@@ -59,7 +59,7 @@ class API extends Handler {
 
 		if (SINGLE_USER_MODE) $login = "admin";
 
-		$sth = $this->pdo->prepare("SELECT id FROM ttrss_users WHERE login = ?");
+		$sth = $this->pdo->prepare("SELECT id FROM ttrss_users WHERE LOWER(login) = LOWER(?)");
 		$sth->execute([$login]);
 
 		if ($row = $sth->fetch()) {
-- 
cgit v1.2.3