Order of execution has changed. (PHP snippets before actual login)

subscribe

I am seeing the same behavior. I downgraded to 2.5 for the time being.

Same issue. Downgrading and subscribing.

Set to critical to make it easyer to spot... took me quite some time to find what was wrong...

Downgraded to 2.5

Having the same issue here... It actually broke the site because we're using Content Profile and Auto Assign Role during registration. With the PHP firing beforehand, the profiles aren't being saved. Downgraded and subscribing.

Anyone has found any solution for this yet?

Same here. Downgraded and subscribing.

Okay, I tracked down the cause of the bug. The latest version has a new form_alter hook on the user_login form that appears to be clashing with the hook_user hook. I can't tell the purpose of the new form_alter hook but it is also calling the routine that evaluates the PHP snippet and redirecting the user before the hook_user hook is doing it.

I found a work around that I think is allowed because of another bug. If you check the "Return user to where he/she came from. (Preserve destination" box in the "destination URL admin" section it will bypass the user_login hook, run the PHP evaluation and then redirect as it did in the previous release.

Please see comments in the culprit function from the 6.2.6 version below.

function login_destination_form_alter(&$form, $form_state, $form_id) {
// THIS FUNCTION IS NEW AND BEING CALLED BEFORE HOOK_USER
  if ($form_id == 'user_login') {
    
    if ( variable_get('ld_destination', TRUE) ) {
     // THIS FUNCTION IS EMPTY AND DOES NOT DO ANYTHING - BUT BY SELECTING "Return user to where he/she came from. (Preserve destination)" THIS SECTION WILL RUN INSTEAD OF THE FOLLOWING

    }
    // php snippet or static url
    else {
      // THIS IS THE ACTUAL CAUSE OF THE PROBLEM AS IT RUNS BEFORE THE USER OBJECT IS LOADED AND DOES NOT ALLOW FOR PROPER FUNCTION PHP SNIPPETS FOR REDIRECTS
      $arr = login_destination_calculate_redirection_path_and_query($form);
      $path  = $arr[0];
      $query = $arr[1];
      if (!empty($query) ) {$add_to_path = "?" . $query;}
      $url = $path  . $add_to_path;
    }
  

    $form['#redirect'] = $url;
  }
}

This has been fixed in the latest module. Please install and test. Please be aware the the redirect conditions are also working now and if you had conditions already entered they may not have been working on previous versions and will begin working on the new version. This could cause unexpected actions.

I confirm that it works now. The php snippet has access to the username and roles etc...