Fixed security hole when connecting to existing accounts. Added support...

arckinteractive / elgg_hybridauth

HybridAuth Client for Elgg

10 stars 9 forks source link

Fixed security hole when connecting to existing accounts. Added support... #14

Closed bgunn closed 9 years ago

bgunn commented 9 years ago

This patch fixes a security hole that allows a user connecting with a provider that does not return an email address to be logged in as any user by providing another users email address. Instagram support has been addes as well.