From: Arthur Schiwon <blizzz@owncloud.com>
Date: Thu, 29 Aug 2013 22:33:48 +0000 (+0200)
Subject: Use the real username in preferences and magic cookie instead of case-insensitive... 
X-Git-Tag: v6.0.0alpha2~242
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=7d398ba62227cf77066585b47adfcb5188dd991b;p=nextcloud-server.git

Use the real username in preferences and magic cookie instead of case-insensitive user input. Fixes 4616.
---

diff --git a/lib/base.php b/lib/base.php
index 2e6a37c9f4e..c6e031e61d6 100644
--- a/lib/base.php
+++ b/lib/base.php
@@ -791,14 +791,15 @@ class OC {
 				self::$session->set('timezone', $_POST['timezone-offset']);
 			}
 
-			self::cleanupLoginTokens($_POST['user']);
+			$userid = OC_User::getUser();
+			self::cleanupLoginTokens($userid);
 			if (!empty($_POST["remember_login"])) {
 				if (defined("DEBUG") && DEBUG) {
 					OC_Log::write('core', 'Setting remember login to cookie', OC_Log::DEBUG);
 				}
 				$token = OC_Util::generate_random_bytes(32);
-				OC_Preferences::setValue($_POST['user'], 'login_token', $token, time());
-				OC_User::setMagicInCookie($_POST["user"], $token);
+				OC_Preferences::setValue($userid, 'login_token', $token, time());
+				OC_User::setMagicInCookie($userid, $token);
 			} else {
 				OC_User::unsetMagicInCookie();
 			}