[jugbugs]

I have another question, which is php related.

I have this plugin (vb4 version) and it is working, however, I cannot get the "Allow Built-in Accounts" (ldap_allow_builtin) setting to work when putting in a comma separated list. If I only have one userid in this setting it works for that user only, which leads me to believe this is an easy solution. Given the fact that I am php retard, the answer is not glaringly obvious, therefore, I will summarize what I know in hopes someone can help me.

In the product xml, this variable (setting) is defined as follows:

<setting varname="ldap_allow_builtin" displayorder="100">
	<datatype>free</datatype>
	<defaultvalue>1</defaultvalue>
</setting>

The piece of code that I believe to be broken that uses this variable is:

PHP Code:

//if login is on the list of allowed logins, don't use ldap authentication
$userid = $vbulletin->db->query_first_slave("
   SELECT userid
   FROM ".TABLE_PREFIX."user
   WHERE userid in ('".$vbulletin->db->escape_string(htmlspecialchars_uni($vbulletin->options['ldap_allow_builtin']))."')
   AND username = '".$vbulletin->db->escape_string(htmlspecialchars_uni($vbulletin->GPC['vb_login_username']))."'");
if ($userid) {
    ($debug = $debug ) ? print_log("user on the non-ldap list. " . $vbulletin->GPC['vb_login_username'] . " with id: ". implode(",",$userid)) : false;
    return;
} 


So, what is wrong with the php code that is not searching "ldap_allow_builtin" as if it is an array?

Thanks.