[VCL-299] shib users may have incorrect full name and email address.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1
• Fix Version/s: 2.2
• Component/s: web gui (frontend)
• Assignee: Josh Thompson
• Reporter: Sean Dilda
• Created: 25/Jan/10 22:34
• Updated: 08/Apr/10 14:10
• Resolved: 08/Apr/10 14:10

Description

A bug in the shibboleth code can cause a user's full name info and email address to be changed if their uid equals the row id of another user. Here is the fix:

— web/.ht-inc/authmethods/shibauth.php (revision 903001)
+++ web/.ht-inc/authmethods/shibauth.php (working copy)
@@ -92,7 +92,7 @@
}
$query .= "emailnotices = 0, "
. "lastupdated = NOW() "

• . "WHERE uid = {$user['id']}";
  + . "WHERE id = {$user['id']}";
  doQuery($query, 101, 'vcl', 1);
  return $user;
  }