Disable authentication if the user type is set to virtual.

This commit is contained in:
markjcrane 2023-07-13 18:30:29 -06:00
parent d3aed6707e
commit 52c0b3955f
4 changed files with 4 additions and 0 deletions

View File

@ -170,6 +170,7 @@ class plugin_database {
$sql .= "u.user_email, u.salt, u.api_key, u.domain_uuid, d.domain_name "; $sql .= "u.user_email, u.salt, u.api_key, u.domain_uuid, d.domain_name ";
$sql .= "from v_users as u, v_domains as d "; $sql .= "from v_users as u, v_domains as d ";
$sql .= "where u.domain_uuid = d.domain_uuid "; $sql .= "where u.domain_uuid = d.domain_uuid ";
$sql .= "and user_type = 'default' ";
if (isset($this->key) && strlen($this->key) > 30) { if (isset($this->key) && strlen($this->key) > 30) {
$sql .= "and u.api_key = :api_key "; $sql .= "and u.api_key = :api_key ";
$parameters['api_key'] = $this->key; $parameters['api_key'] = $this->key;

View File

@ -132,6 +132,7 @@ class plugin_email {
$sql .= "and domain_uuid = :domain_uuid "; $sql .= "and domain_uuid = :domain_uuid ";
$parameters['domain_uuid'] = $_SESSION["domain_uuid"]; $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
} }
$sql .= "and user_type = 'default' ";
$parameters['username'] = $_REQUEST['username']; $parameters['username'] = $_REQUEST['username'];
$database = new database; $database = new database;
$row = $database->select($sql, $parameters, 'row'); $row = $database->select($sql, $parameters, 'row');

View File

@ -131,6 +131,7 @@ class plugin_ldap {
$sql .= "and domain_uuid = :domain_uuid "; $sql .= "and domain_uuid = :domain_uuid ";
$parameters['domain_uuid'] = $this->domain_uuid; $parameters['domain_uuid'] = $this->domain_uuid;
} }
$sql .= "and user_type = 'default' ";
$parameters['username'] = $this->username; $parameters['username'] = $this->username;
$database = new database; $database = new database;
$row = $database->select($sql, $parameters, 'row'); $row = $database->select($sql, $parameters, 'row');

View File

@ -149,6 +149,7 @@ class plugin_totp {
$sql .= "and domain_uuid = :domain_uuid "; $sql .= "and domain_uuid = :domain_uuid ";
$parameters['domain_uuid'] = $this->domain_uuid; $parameters['domain_uuid'] = $this->domain_uuid;
} }
$sql .= "and user_type = 'default' ";
$parameters['username'] = $this->username; $parameters['username'] = $this->username;
$database = new database; $database = new database;
$row = $database->select($sql, $parameters, 'row'); $row = $database->select($sql, $parameters, 'row');