mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-03-28 17:42:57 +01:00
fixes #1368 user with "guest" status get refused connection
This commit is contained in:
@@ -1134,9 +1134,28 @@ SELECT '.$conf['user_fields']['id'].' AS id,
|
|||||||
|
|
||||||
if ($user_found)
|
if ($user_found)
|
||||||
{
|
{
|
||||||
log_user($row['id'], $remember_me);
|
// if user status is "guest" then she should not be granted to log in.
|
||||||
trigger_notify('login_success', stripslashes($username));
|
// The user may not exist in the user_infos table, so we consider it's a "normal" user by default
|
||||||
return true;
|
$status = 'normal';
|
||||||
|
|
||||||
|
$query = '
|
||||||
|
SELECT
|
||||||
|
*
|
||||||
|
FROM '.USER_INFOS_TABLE.'
|
||||||
|
WHERE user_id = '.$row['id'].'
|
||||||
|
;';
|
||||||
|
$result = pwg_query($query);
|
||||||
|
while ($user_infos_row = pwg_db_fetch_assoc($result))
|
||||||
|
{
|
||||||
|
$status = $user_infos_row['status'];
|
||||||
|
}
|
||||||
|
|
||||||
|
if ('guest' != $status)
|
||||||
|
{
|
||||||
|
log_user($row['id'], $remember_me);
|
||||||
|
trigger_notify('login_success', stripslashes($username));
|
||||||
|
return true;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
trigger_notify('login_failure', stripslashes($username));
|
trigger_notify('login_failure', stripslashes($username));
|
||||||
return false;
|
return false;
|
||||||
|
|||||||
Reference in New Issue
Block a user