hydrian / TTRSS-Auth-LDAP

GitHub repository for Tiny Tiny RSS's auth_ldap plugin
https://github.com/hydrian/TTRSS-Auth-LDAP/wiki
Other
28 stars 21 forks source link

Update to work with native php ldap library instead of Net_LDAP2 #14

Closed tsmgeek closed 8 years ago

Mic92 commented 8 years ago

Please escape the user before passing it to the query using ldap_escape, otherwise you allow ldap injection

tsmgeek commented 8 years ago

Ive updated my code to allow for this. Note that I had to wrap this in a function as pre php 5.6 does not have ldap_escape function.