View | Details | Raw Unified | Return to bug 4193
Collapse All | Expand All

(-)a/C4/Auth.pm (-5 / +4 lines)
Lines 1258-1268 sub checkpw { Link Here
1258
        my ( $md5password, $cardnumber, $borrowernumber, $userid, $firstname,
1258
        my ( $md5password, $cardnumber, $borrowernumber, $userid, $firstname,
1259
            $surname, $branchcode, $flags )
1259
            $surname, $branchcode, $flags )
1260
          = $sth->fetchrow;
1260
          = $sth->fetchrow;
1261
        if ( md5_base64($password) eq $md5password ) {
1261
        if ( ( md5_base64($password) eq $md5password ) and ($md5password ne "!") ) {
1262
1262
1263
            C4::Context->set_userenv( $borrowernumber, $userid, $cardnumber,
1263
            C4::Context->set_userenv( $borrowernumber, $userid, $cardnumber,
1264
                $firstname, $surname, $branchcode, $flags );
1264
                $firstname, $surname, $branchcode, $flags );
1265
            return 1, $userid;
1265
            return 1, $cardnumber;
1266
        }
1266
        }
1267
    }
1267
    }
1268
    if (   $userid && $userid eq C4::Context->config('user')
1268
    if (   $userid && $userid eq C4::Context->config('user')
Lines 1416-1423 Returns member's flags or 0 if a permission is not met. Link Here
1416
1416
1417
sub haspermission {
1417
sub haspermission {
1418
    my ($userid, $flagsrequired) = @_;
1418
    my ($userid, $flagsrequired) = @_;
1419
    my $sth = C4::Context->dbh->prepare("SELECT flags FROM borrowers WHERE userid=?");
1419
    my $sth = C4::Context->dbh->prepare("SELECT flags FROM borrowers WHERE userid=? or cardnumber=?");
1420
    $sth->execute($userid);
1420
    $sth->execute($userid,$userid);
1421
    my $flags = getuserflags( $sth->fetchrow(), $userid );
1421
    my $flags = getuserflags( $sth->fetchrow(), $userid );
1422
    if ( $userid eq C4::Context->config('user') ) {
1422
    if ( $userid eq C4::Context->config('user') ) {
1423
        # Super User Account from /etc/koha.conf
1423
        # Super User Account from /etc/koha.conf
1424
- 

Return to bug 4193