openrat-cms

commit 4a0b87e0618ad42a30ca2039550ba432ba170a8a
parent e7483bc4ff7f0864b0f5afaaf0d4b54f65002bd5
Author: Jan Dankert <develop@jandankert.de>
Date:   Thu, 19 Nov 2020 11:23:17 +0100

Fix: DB connections must be enabled.

Diffstat:
M
modules/cms/auth/RememberAuth.class.php
 | 
13
+++++++++----

1 file changed, 9 insertions(+), 4 deletions(-)
diff --git a/modules/cms/auth/RememberAuth.class.php b/modules/cms/auth/RememberAuth.class.php
@@ -36,16 +36,21 @@ class RememberAuth implements Auth
 				list($selector, $token) = array_pad(explode('.', Cookie::get(Action::COOKIE_TOKEN)), 2, '');
 				$dbid = Cookie::get( Action::COOKIE_DB_ID );
 
-				$dbConfig = Configuration::subset('database');
+				$allDbConfig = Configuration::subset('database');
 
-				if (!$dbConfig->has($dbid)) {
+				if (!$allDbConfig->has($dbid)) {
 
-					Logger::info( TextMessage::create('Unknown DB-Id for token-login: ${0}',[$dbid]) );
+					Logger::warn( TextMessage::create('Unknown DB-Id ${0}, no login with token possible',[$dbid]) );
 					return null;
 				}
 
-				$dbConfig = $dbConfig->subset($dbid);
+				$dbConfig = $allDbConfig->subset($dbid);
 
+				if (! $dbConfig->is('enabled',true)) {
+
+					Logger::warn( TextMessage::create('DB-Id ${0} is disabled, no login with login token possible',[$dbid]) );
+					return null;
+				}
 
 				$key = 'read'; // Only reading in database.