From 62d0f249d2347165f9c9f2439d03082d0d79e456 Mon Sep 17 00:00:00 2001 From: Uwe Steinmann Date: Tue, 30 Aug 2016 07:56:50 +0200 Subject: [PATCH] remove guest user check --- inc/inc.ClassDbAuthentication.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inc/inc.ClassDbAuthentication.php b/inc/inc.ClassDbAuthentication.php index 1750a6acc..18838ee3e 100644 --- a/inc/inc.ClassDbAuthentication.php +++ b/inc/inc.ClassDbAuthentication.php @@ -58,7 +58,7 @@ class SeedDMS_DbAuthentication extends SeedDMS_Authentication { // Check if password matches (if not a guest user) // Assume that the password has been sent via HTTP POST. It would be careless // (and dangerous) for passwords to be sent via GET. - if (($userid != $settings->_guestID) && (md5($password) != $user->getPwd()) || ($userid == $settings->_guestID) && $user->getPwd() && (md5($password) != $user->getPwd())) { + if (md5($password) != $user->getPwd()) { /* if counting of login failures is turned on, then increment its value */ if($settings->_loginFailure) { $failures = $user->addLoginFailure();