From c67bc65cbec7e9f0f3d3502f5383fd9193251d0e Mon Sep 17 00:00:00 2001 From: "Eloy Lafuente (stronk7)" Date: Thu, 8 Mar 2012 11:42:13 +0100 Subject: [PATCH] MDL-31248 - lib - prevent moodle_strtolower() silent discard to lead to false-correct usernames --- lib/moodlelib.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/moodlelib.php b/lib/moodlelib.php index 26b0f2f9f1b..981b0ed478a 100644 --- a/lib/moodlelib.php +++ b/lib/moodlelib.php @@ -2765,12 +2765,12 @@ function get_moodle_cookie() { return ''; } else { $username = rc4decrypt($_COOKIE[$cookiename], true); - $username = moodle_strtolower($username); - $userdata = preg_replace('/[^-\.@_a-z0-9]/', '', $username); + $userdata = moodle_strtolower($username); + $userdata = preg_replace('/[^-\.@_a-z0-9]/', '', $userdata); if ($username != $userdata) { $username = rc4decrypt($_COOKIE[$cookiename]); - $username = moodle_strtolower($username); - $userdata = preg_replace('/[^-\.@_a-z0-9]/', '', $username); + $userdata = moodle_strtolower($username); + $userdata = preg_replace('/[^-\.@_a-z0-9]/', '', $userdata); if ($userdata == $userdata) { set_moodle_cookie($username); } else { -- 2.43.0