Escape distinguished name in ldap search (#1528)

2020-03-06 16:16:31 +01:00
parent a50a59bbca
commit d60e738bd2
2 changed files with 4 additions and 4 deletions
--- a/src/Ldap/LdapManager.php
+++ b/src/Ldap/LdapManager.php
@@ -157,7 +157,7 @@ class LdapManager

        return $this->driver->search(
            $roleParameter['baseDn'],
-            sprintf('(&%s(%s=%s))', $filter, $roleParameter['userDnAttribute'], $dn),
+            sprintf('(&%s(%s=%s))', $filter, $roleParameter['userDnAttribute'], ldap_escape($dn, null, LDAP_ESCAPE_FILTER)),
            [$roleParameter['nameAttribute']]
        );
    }