From 52fed4ca55f53d3ae29aa421f0fe0c6abf9f4311 Mon Sep 17 00:00:00 2001
From: Jared Hancock <jared@osticket.com>
Date: Tue, 17 Dec 2013 09:17:10 -0600
Subject: [PATCH] auth: Properly filter SSO backends for staff
---
include/class.auth.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/include/class.auth.php b/include/class.auth.php
index bfc36ab9d..08760ed9d 100644
--- a/include/class.auth.php
+++ b/include/class.auth.php
@@ -133,7 +133,7 @@ class AuthenticationBackend {
$sql = 'SELECT backend FROM '.STAFF_TABLE
.' WHERE staff_id='.db_input($staff->getId());
$backend = db_result(db_query($sql));
- return !$backend || strcasecmp($bk, $backend) === 0;
+ return !$backend || strcasecmp($bk::$id, $backend) === 0;
}
function _getAllowedBackends($username) {
--
GitLab