Update class.auth.phpReviewed-By:

Update class.auth.php Reviewed-By: Jared Hancock <[email protected]>
jezuk · Apr 24, 2016 · f3a4bf5 · f3a4bf5
2 parents 27b97e4 + dcea76e
commit f3a4bf5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/include/class.auth.php b/include/class.auth.php
@@ -1061,7 +1061,7 @@ function signOn() {
             if (($ticket = Ticket::lookupByNumber($_GET['t'], $_GET['e']))
                     // Using old ticket auth code algo - hardcoded here because it
                     // will be removed in ticket class in the upcoming rewrite
-                    && !strcasecmp($_GET['a'], md5($ticket->getId() .  $_GET['e'] . SECRET_SALT))
+                    && !strcasecmp($_GET['a'], md5($ticket->getId() .  strtolower($_GET['e']) . SECRET_SALT))
                     && ($owner = $ticket->getOwner()))
                 $user = new ClientSession($owner);
         }