tobias/friendica
1
0
Fork 0
Code Pull requests Activity

Fix OpenID login

Browse source 
The problem was that while openid was stored not-normalized in the database,
the checking code was looking for a normalized form instead.

The commit removing normalization step on saving user preferences
was 8367cad, which might have left old users with normalized openid
and new users with non-normalized one.

This commit makes the checking code look for both normalized and not
normalized form, to be backward compatible.
This commit is contained in:
Sandro Santilli 2016-05-25 12:43:26 +02:00
parent 3c402b6a6c
commit b7bc428630
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
mod/openid.php
View file

@ -26,10 +26,15 @@ function openid_content(&$a) {
goaway(z_root());
}
// NOTE: we search both for normalised and non-normalised form of $authid
// because the normalization step was removed from setting
// mod/settings.php in 8367cad so it might have left mixed
// records in the user table
//
$r = q("SELECT `user`.*, `user`.`pubkey` as `upubkey`, `user`.`prvkey` as `uprvkey`
FROM `user` WHERE `openid` = '%s' AND `blocked` = 0
FROM `user` WHERE ( openid = '%s' OR openid = '%s' ) AND blocked = 0
AND `account_expired` = 0 AND `account_removed` = 0 AND `verified` = 1 LIMIT 1",
dbesc($authid)
dbesc($authid), dbesc(normalise_openid($authid))
);
if($r && count($r)) {