a240964d6dfdd6f8661487b64538d33518d88501 angie Mon May 16 09:38:09 2016 -0700 Added checking of wiki.loggedInCookie (numeric user ID) using random numbers as suggested by Max if the new centralDb table gbMemberToken exists, otherwise checking the ID vs gbMembers.idx. refs #17327 diff --git src/hg/hgLogin/hgLogin.c src/hg/hgLogin/hgLogin.c index 95c3630..ab7cf57 100644 --- src/hg/hgLogin/hgLogin.c +++ src/hg/hgLogin/hgLogin.c @@ -1279,35 +1279,34 @@ return; } struct gbMembers *m = gbMembersLoad(row); sqlFreeResult(&sr); /* Check user name exist and account activated */ if (!sameString(m->accountActivated,"Y")) { freez(&errMsg); errMsg = cloneString("Account is not activated."); displayLoginPage(conn); return; } if (checkPwd(password,m->password)) { - unsigned int userID=m->idx; - hPrintf("

Login successful for user %s with id %d.\n

\n" - ,userName,userID); + hPrintf("

Login successful for user %s.\n

\n", userName); clearNewPasswordFields(conn, userName); - displayLoginSuccess(userName,userID); + uint authToken = loginSystemLoginUser(userName); + displayLoginSuccess(userName, authToken); return; } else if (usingNewPassword(conn, userName, password)) { cartSetString(cart, "hgLogin_changeRequired", "YES"); changePasswordPage(conn); } else { errMsg = cloneString(incorrectUsernameOrPassword); displayLoginPage(conn); return; } gbMembersFree(&m); }