[dev] recent CVS using new PEAR, Horde auth & sql
mays@optonline.net
mays@optonline.net
Wed, 18 Jul 2001 13:36:17 -0400
missed a quoteString.
Mark
--- lib/Auth/sql.php Tue Jul 17 11:20:14 2001
+++ /home/httpd/horde/lib/Auth/sql.php Wed Jul 18 13:29:44 2001
@@ -108,7 +108,7 @@
/* Build the SQL query. */
$query = 'SELECT user_id FROM ' . $this->params['table'];
$query .= ' WHERE user_id = ' . $this->db->quoteString($userID);
- $query .= ' AND user_pass = ' . md5($credentials['password']);
+ $query .= ' AND user_pass = ' . $this->db->quoteString(md5($credentials['password']));
/* Execute the query. */
$result = $this->db->query($query);