[PATCH] Inactive users can still login to the system

Proposed fix in PluginsfGuardUser?.php

Add if (!$this->getIsActive()) return false; as the first line of checkPassword()

  public function checkPassword($password)
  {
  	if (!$this->getIsActive()) return false;
    if ($callable = sfConfig::get('app_sf_guard_plugin_check_password_callable'))
    {
      return call_user_func_array($callable, array($this->getUsername(), $password, $this));
    }
    else
    {
      return $this->checkPasswordByGuard($password);
    }
  }

(In [15836]) [1.1, 1.2, 1.3] Fixes issue with non active users still being able to login (closes #5891)

this also applies to the propel version, sfGuardPlugin.

you can apply last 3 patches

in r30261