From 0b01bb5c99d366c8d0b08cd250f18dc20e03f2da Mon Sep 17 00:00:00 2001
From: Alan Knowles <alan@roojs.com>
Date: Mon, 15 Oct 2018 13:13:56 +0800
Subject: [PATCH] DataObjects/Core_person.php

---
 DataObjects/Core_person.php | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/DataObjects/Core_person.php b/DataObjects/Core_person.php
index 3c2e4e6a..4dbdab27 100644
--- a/DataObjects/Core_person.php
+++ b/DataObjects/Core_person.php
@@ -291,12 +291,20 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
         }
         
         
+        $auto_auth_allow = false;
+        if (!empty($ff->Pman['local_autoauth']) && $ff->Pman['local_autoauth'] === true) {
+            $auto_auth_allow  = true;
+        }
+        if (empty($_SERVER['PATH_INFO']) || $_SERVER['PATH_INFO'] == '/Login') {
+            $auto_auth_allow  = false;
+        }
+        
         // local auth - 
         $default_admin = false;
         if (!empty($ff->Pman['local_autoauth']) && 
             ($ff->Pman['local_autoauth'] === true) &&
             (
-                empty($_SERVER['PATH_INFO']) || // auto-auth is disabled for home page
+                !empty($_SERVER['PATH_INFO']) || // auto-auth is disabled for home page and login
                 $_SERVER['PATH_INFO'] != '/Login'
             ) &&  // auto-auth is disabled for home page
             (!empty($_SERVER['SERVER_ADDR'])) &&
@@ -313,7 +321,7 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
                 
             )
         ) {
-             $group = DB_DataObject::factory('core_group');
+            $group = DB_DataObject::factory('core_group');
             $group->get('name', 'Administrators');
             
             $member = DB_DataObject::factory('core_group_member');
-- 
2.39.2