CMS MADE SIMPLE FORGE

Frontend Users

 
Back Back to List

[#7482] only_groups param causes login to fail with 'invalid username or password'

avatar
Created By: Phil Scoltock (mantapro)
Date Submitted: Thu Jan 19 09:06:10 -0500 2012

Assigned To: Robert Campbell (calguy1000)
Version: 1.16.6
CMSMS Version: 1.10.2
Severity: Major
Resolution: Fixed
State: Closed
Summary:
only_groups param causes login to fail with 'invalid username or password'
Detailed Description:
When loging in with the only_groups param set to a comma delimited set of
permisable groups, it incorrectly fails with 'invalid username or password'.

looking at the SQL created the groupname is incorrectly looking for (g.groupname
= "group1,group2,group3") which is of course incorrect, it either needs to be
g.groupname in ("group1","group2","group") or (g.groupname="group1" or
g.groupname="group2")

Root cause is only-groups parameter is now failing to be split into an array
which is preventing the correct formation of the SQL.

FrontEndUsers.api.php has been changed to use explode() instead of previous
split(), however the regex delimiter from split() has been carried over and
explode() can only cope with a simple string delimiter

Needs to either be. explode(','.......................etc

or use preg_split


History

Comments
avatar 
Date: 2012-02-02 16:31
Posted By: Jonathan Schmid (Foaly*)

I can confirm! searched an hour or so.
Updates

Updated: 2012-09-28 23:32
state: Open => Closed

Updated: 2012-02-10 23:05
resolution_id: 5 => 7

Updated: 2012-02-02 17:23
resolution_id: => 5
assigned_to_id: 110 => 106