Login logic should use exact badgename and not LIKE

shevett / congo

CONGO Event Management System

GNU Affero General Public License v3.0

3 stars 1 forks source link

Login logic should use exact badgename and not LIKE #346

Closed dkapell closed 9 years ago

dkapell commented 9 years ago

Currently the login logic uses a LIKE query to find the user, so if one user's name is contained in another, they can not log in. (eg 'Admin' vs 'Administrator'). Checking the login name should be an exact match to the badge name.