From: Raphaël Barrois <raphael.barrois@polytechnique.org>
Date: Sat, 26 Nov 2011 00:13:11 +0000 (+0100)
Subject: Restore safe behaviour of getLogin.
X-Git-Tag: xorg/1.1.5~34^2~9
X-Git-Url: http://git.polytechnique.org/?a=commitdiff_plain;h=c846452b76c8a595173a2dc63c912cc4ed105b05;p=platal.git

Restore safe behaviour of getLogin.

The modified version failed when an external account contained a valid X.org hruid...

Signed-off-by: Raphaël Barrois <raphael.barrois@polytechnique.org>
---

diff --git a/classes/user.php b/classes/user.php
index 7723c3f..a7467b2 100644
--- a/classes/user.php
+++ b/classes/user.php
@@ -85,8 +85,8 @@ class User extends PlUser
         // Checks whether $login is a valid hruid or not.
         $res = XDB::query('SELECT  uid
                              FROM  accounts
-                            WHERE  hruid' . XDB::formatWildcards(XDB::WILDCARD_CONTAINS, $login));
-        if ($res->numRows() == 1) {
+                             WHERE  hruid = {?}', $login);
+        if ($res->numRows()) {
             return $res->fetchOneCell();
         }