From a19db806cf72b776741b81f7d4caf9fd02c02ca3 Mon Sep 17 00:00:00 2001 From: Uwe Steinmann Date: Tue, 5 Feb 2019 07:34:48 +0100 Subject: [PATCH] check if configured guest user actually exists --- controllers/class.Login.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/controllers/class.Login.php b/controllers/class.Login.php index fbf9ed835..bf5abc190 100644 --- a/controllers/class.Login.php +++ b/controllers/class.Login.php @@ -57,6 +57,10 @@ class SeedDMS_Controller_Login extends SeedDMS_Controller_Common { */ if(!$user && $settings->_enableGuestLogin && (int) $settings->_guestID) { $guestUser = $dms->getUser((int) $settings->_guestID); + if(!$guestUser) { + $this->setErrorMsg("login_error_text"); + return false; + } if(($login != $guestUser->getLogin())) { if ((!isset($pwd) || strlen($pwd)==0)) { $this->setErrorMsg("login_error_text");