Skip to content

Commit f8ca5d2

Browse files
committed
FC-3028 discard login form object from tempobjectstore
1 parent 26c0cb1 commit f8ca5d2

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

packages/security/FarcryUD.cfc

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -99,8 +99,7 @@
9999
<cfset var dateTolerance = 0 />
100100

101101
<cfimport taglib="/farcry/core/tags/formtools" prefix="ft" />
102-
103-
102+
104103
<!--- For backward compatability, check for userlogin and password in form. This should be removed once we're willing to not support pre 4.1 login templates --->
105104
<cfif structkeyexists(form,"userlogin") and structkeyexists(form,"password")>
106105
<cfset qUser = queryUserPassword(form.userlogin,form.password) />
@@ -110,10 +109,12 @@
110109
<ft:processformObjects typename="#getLoginForm()#">
111110
<cfset qUser = queryUserPassword(stProperties.username,stProperties.password) />
112111
<cfset stResult.userid = trim(stProperties.username) />
112+
<!--- discard form object from session --->
113+
<ft:break>
113114
</ft:processformObjects>
114115
</ft:processform>
115116
</cfif>
116-
117+
117118
<!--- If (somehow) a login was submitted, process the result --->
118119
<cfif structKeyExists(stResult, "userid") AND len(stResult.userid)>
119120

0 commit comments

Comments
 (0)