Project

General

Profile

« Previous | Next » 

Revision 1318

Added by Dietmar over 14 years ago

Ticket #976 Using md5 also for the username inside class.login.php

View differences:

branches/2.8.x/CHANGELOG
12 12

  
13 13
------------------------------------- 2.8.1 -------------------------------------
14 14
14-Apr-2010 Dietmar Woellbrink (Luisehahne)
15
#	Ticket #976 Using md5 also for the username inside class.login.php
16
14-Apr-2010 Dietmar Woellbrink (Luisehahne)
15 17
#	Ticket #977 Templates sorted in alphabetical order
16 18
14-Apr-2010 Dietmar Woellbrink (Luisehahne)
17 19
#	Ticket #978 Add additional PHP 5.2 check to installation
branches/2.8.x/wb/admin/interface/version.php
52 52

  
53 53
// check if defined to avoid errors during installation (redirect to admin panel fails if PHP error/warnings are enabled)
54 54
if(!defined('VERSION')) define('VERSION', '2.8.x');
55
if(!defined('REVISION')) define('REVISION', '1317');
55
if(!defined('REVISION')) define('REVISION', '1318');
56 56

  
57 57
?>
branches/2.8.x/wb/framework/class.login.php
144 144
	function authenticate() {
145 145
		// Get user information
146 146
		$database = new database();
147
		$query = "SELECT * FROM ".$this->USERS_TABLE." WHERE username = '".$this->username."' AND password = '".$this->password."' AND active = '1'";
147
		$query = 'SELECT * FROM `'.$this->USERS_TABLE.'` WHERE MD5(`username`) = "'.md5($this->username).'" AND `password` = "'.$this->password.'" AND `active` = 1';
148 148
		$results = $database->query($query);
149 149
		$results_array = $results->fetchRow();
150 150
		$num_rows = $results->numRows();

Also available in: Unified diff