fix case insensitive username match for LDAP

2018-03-26 22:57:01 +01:00
parent 3d5a26266e
commit d9a0103150
3 changed files with 6 additions and 2 deletions
--- a/lib/App/Netdisco/Web/AuthN.pm
+++ b/lib/App/Netdisco/Web/AuthN.pm
@@ -58,7 +58,7 @@ post '/login' => sub {

    if ($success) {
        my $user = schema('netdisco')->resultset('User')
-          ->find({ username => { -ilike => param('username') } });
+          ->find({ username => { -ilike => quotemeta(param('username')) } });

        session logged_in_user => $user->username;
        session logged_in_fullname => $user->fullname;