[Phpgroupware-cvs] phpgroupware login.php

[Dave Hall]

CVSROOT:        /sources/phpgroupware
Module name:    phpgroupware
Changes by:     Dave Hall <skwashd>     06/12/26 11:58:36

Modified files:
        .              : login.php 

Log message:
        new auth type 'known' to allow session creation within phpgw without 
knowing the user's password, will break email

CVSWeb URLs:
http://cvs.savannah.gnu.org/viewcvs/phpgroupware/login.php?cvsroot=phpgroupware&r1=1.111&r2=1.112

Patches:
Index: login.php
===================================================================
RCS file: /sources/phpgroupware/phpgroupware/login.php,v
retrieving revision 1.111
retrieving revision 1.112
diff -u -b -r1.111 -r1.112
--- login.php   3 Oct 2006 14:04:58 -0000       1.111
+++ login.php   26 Dec 2006 11:58:36 -0000      1.112
@@ -8,7 +8,7 @@
        * @copyright Copyright (C) 2000-2005 Free Software Foundation, Inc. 
http://www.fsf.org/
        * @license http://www.gnu.org/licenses/gpl.html GNU General Public 
License
        * @package phpgroupware
-       * @version $Id: login.php,v 1.111 2006/10/03 14:04:58 Caeies Exp $
+       * @version $Id: login.php,v 1.112 2006/12/26 11:58:36 skwashd Exp $
        */
 
        chdir('phpgwapi/inc/sso');
@@ -119,7 +119,8 @@
                        $login .= '@' . $_POST['logindomain'];
                }
 
-               $GLOBALS['sessionid'] = 
$GLOBALS['phpgw']->session->create($login,$passwd,$_POST['passwd_type']);
+               $passwd_type = $_POST['passwd_type'] == 'md5' ? 'md5' : 'text';
+               $GLOBALS['sessionid'] = 
$GLOBALS['phpgw']->session->create($login, $passwd, $passwd_type);
 
                if (! isset($GLOBALS['sessionid']) || ! $GLOBALS['sessionid'])
                {