verify openid AX email type

diff --git a/www/login.php b/www/login.php
index a97246f3f7a3b5ee946fbfd112798e7fe6de6448..bba7c9945330cf6ee29a218742a4119cfb00509e 100644 (file)
--- a/www/login.php
+++ b/www/login.php
@@ -122,7 +122,10 @@ $email = isset($openid['openid.ext2.value.email']) && !isset($email)
 $email = isset($openid['openid.sreg.email']) && !isset($email)
     ? $openid['openid.sreg.email']
     : $email;
 $email = isset($openid['openid.sreg.email']) && !isset($email)
     ? $openid['openid.sreg.email']
     : $email;

-$email = isset($openid['openid.ax.value.email']) && !isset($email)
+$email = isset($openid['openid.ax.value.email'])
+    && isset($openid['openid.ax.type.email'])
+    && $openid['openid.ax.type.email'] == 'http://axschema.org/contact/email'
+    && !isset($email)

     ? $openid['openid.ax.value.email']
     : $email;
 $_SESSION['email'] = isset($email)
     ? $openid['openid.ax.value.email']
     : $email;
 $_SESSION['email'] = isset($email)