[dev] recent CVS using new PEAR, Horde auth & sql

mays@optonline.net mays@optonline.net
Wed, 18 Jul 2001 13:36:17 -0400


missed a quoteString.

Mark

--- lib/Auth/sql.php	Tue Jul 17 11:20:14 2001
+++ /home/httpd/horde/lib/Auth/sql.php	Wed Jul 18 13:29:44 2001
@@ -108,7 +108,7 @@
         /* Build the SQL query. */
         $query = 'SELECT user_id FROM ' . $this->params['table'];
         $query .= ' WHERE user_id = ' . $this->db->quoteString($userID);
-        $query .= ' AND user_pass = ' . md5($credentials['password']);
+        $query .= ' AND user_pass = ' . $this->db->quoteString(md5($credentials['password']));
         
         /* Execute the query. */
         $result = $this->db->query($query);