Usernames are always lowered and trimmed after Login

This commit is contained in:
Andreas Österreicher
2020-01-08 17:06:14 +01:00
parent a5fae5f07f
commit 03903ec51b
+2 -1
View File
@@ -378,7 +378,8 @@ class AuthLib
}
else // otherwise
{
$hta = $this->_createAuthObjByPerson(array('uid' => trim($_SERVER['PHP_AUTH_USER'])));
// NOTE: Username needs to be trimmed and lowered because htaccess is allowing login
$hta = $this->_createAuthObjByPerson(array('uid' => mb_strtolower(trim($_SERVER['PHP_AUTH_USER']))));
}
// Invalid credentials