public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-14 14:55:56 +00:00
Code Issues Releases Wiki Activity

authenticate_user: properly escape input

Browse Source
This commit is contained in:
Andrew Dolgov
2009-05-12 00:33:40 +04:00
parent f574fec6a6
commit 2d969845f9
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
functions.php
View File

@@ -1741,6 +1741,7 @@
$pwd_hash1 = encrypt_password($password); $pwd_hash1 = encrypt_password($password);
$pwd_hash2 = encrypt_password($password, $login); $pwd_hash2 = encrypt_password($password, $login);
$login = db_escape_string($login);
if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH
&& $_SERVER["REMOTE_USER"] && $login != "admin") { && $_SERVER["REMOTE_USER"] && $login != "admin") {