From f029e903020a60684cc2fb236829818d798da757 Mon Sep 17 00:00:00 2001 From: Matthijs Kooijman Date: Thu, 2 Jul 2009 17:01:44 +0200 Subject: [PATCH] Disallow changing of the username in mysql_login. --- conf/auth/mysql_login.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/auth/mysql_login.py b/conf/auth/mysql_login.py index 1e3558f..95b3aa6 100644 --- a/conf/auth/mysql_login.py +++ b/conf/auth/mysql_login.py @@ -118,7 +118,7 @@ class mysql_login(BaseAuth): if self.verbose: request.log("mysql_login: authenticated %s (email %s)" % (username, email)) - u = user.User(request, auth_username=username, auth_method=self.name, auth_attribs=('password', 'email', )) + u = user.User(request, auth_username=username, auth_method=self.name, auth_attribs=('name', 'password', 'email')) u.email = email #u.remember_me = 0 # 0 enforces cookie_lifetime config param u.create_or_update(True) -- 2.30.2