public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-20 13:41:30 +00:00
Code Issues Releases Wiki Activity

remove support for plain-text passwords

Browse Source
This commit is contained in:
Andrew Dolgov
2006-03-07 12:25:44 +01:00
parent 68511f86ac
commit 7f16656eb7
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
functions.php
View File

@@ -740,8 +740,7 @@
$pwd_hash = 'SHA1:' . sha1($password);
$result = db_query($link, "SELECT id,login,access_level FROM ttrss_users WHERE
login = '$login' AND ((pwd_hash = '$password' AND '$password' = 'password')
OR pwd_hash = '$pwd_hash')");
login = '$login' AND pwd_hash = '$pwd_hash'");
if (db_num_rows($result) == 1) {
$_SESSION["uid"] = db_fetch_result($result, 0, "id");