mirror of
https://github.com/meineerde/redmine.git
synced 2025-12-19 15:01:14 +00:00
Only perform login action on explicit POST (#25653).
Patch by Holger Just. git-svn-id: http://svn.redmine.org/redmine/trunk@16554 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
parent
b3ac4a6295
commit
fee959675d
@ -34,12 +34,12 @@ class AccountController < ApplicationController
|
|||||||
|
|
||||||
# Login request and validation
|
# Login request and validation
|
||||||
def login
|
def login
|
||||||
if request.get?
|
if request.post?
|
||||||
|
authenticate_user
|
||||||
|
else
|
||||||
if User.current.logged?
|
if User.current.logged?
|
||||||
redirect_back_or_default home_url, :referer => true
|
redirect_back_or_default home_url, :referer => true
|
||||||
end
|
end
|
||||||
else
|
|
||||||
authenticate_user
|
|
||||||
end
|
end
|
||||||
rescue AuthSourceException => e
|
rescue AuthSourceException => e
|
||||||
logger.error "An error occurred when authenticating #{params[:username]}: #{e.message}"
|
logger.error "An error occurred when authenticating #{params[:username]}: #{e.message}"
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user