lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update functions_openid_connect.php

Browse Source
This commit is contained in:
Laurent Destailleur 2023-04-13 22:59:05 +02:00 committed by GitHub
parent 8e1a753e3f
commit 291a7b1d15
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
htdocs/core/login/functions_openid_connect.php
View File

@ -36,10 +36,16 @@ function check_user_password_openid_connect($usertotest, $passwordtotest, $entit
{
global $db, $conf, $langs;
dol_syslog("functions_openid_connect::check_user_password_openid_connect");
// Force master entity in transversal mode
$entity = $entitytotest;
if (isModEnabled('multicompany') && !empty($conf->global->MULTICOMPANY_TRANSVERSE_MODE)) {
$entity = 1;
}
$login = '';
dol_syslog("functions_openid_connect::check_user_password_openid_connect usertotest=".$usertotest." passwordtotest=".preg_replace('/./', '*', $passwordtotest)." entitytotest=".$entitytotest);
// Step 1 is done by user: request an authorization code
if (GETPOSTISSET('username')) {
@ -80,7 +86,7 @@ function check_user_password_openid_connect($usertotest, $passwordtotest, $entit
// Success: retrieve claim to return to Dolibarr as login
$sql = 'SELECT login, entity, datestartvalidity, dateendvalidity';
$sql .= ' FROM '.MAIN_DB_PREFIX.'user';
$sql .= " WHERE login = '".$userinfo_content->$login_claim."'";
$sql .= " WHERE login = '".$db->escape($userinfo_content->$login_claim)."'";
$sql .= ' AND entity IN (0,'.(array_key_exists('dol_entity', $_SESSION) ? ((int) $_SESSION["dol_entity"]) : 1).')';
dol_syslog("functions_openid::check_user_password_openid", LOG_DEBUG);