瀏覽代碼

[Web] Disallow web UI login, when domain is disabled

andryyy 5 年之前
父節點
當前提交
e824239dee
共有 1 個文件被更改,包括 3 次插入1 次删除
  1. 3 1
      data/web/inc/functions.inc.php

+ 3 - 1
data/web/inc/functions.inc.php

@@ -579,8 +579,10 @@ function check_login($user, $pass) {
 		}
 		}
 	}
 	}
 	$stmt = $pdo->prepare("SELECT `password` FROM `mailbox`
 	$stmt = $pdo->prepare("SELECT `password` FROM `mailbox`
+      INNER JOIN domain on mailbox.domain = domain.domain
 			WHERE `kind` NOT REGEXP 'location|thing|group'
 			WHERE `kind` NOT REGEXP 'location|thing|group'
-        AND `active`='1'
+        AND `mailbox`.`active`='1'
+        AND `domain`.`active`='1'
         AND `username` = :user");
         AND `username` = :user");
 	$stmt->execute(array(':user' => $user));
 	$stmt->execute(array(':user' => $user));
 	$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
 	$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);