diff options
| author | jchu <jchu> | 2005-01-21 15:50:25 +0100 |
|---|---|---|
| committer | jchu <jchu> | 2005-01-21 15:50:25 +0100 |
| commit | 28e23308d4e15c8883b8c36b24e4395487004d95 (patch) | |
| tree | 892449d3e5e125f5fc27bab2d534856a5a83de23 /web/html | |
| parent | 91c3f94ff9df319b548cd332566198b72f8124cd (diff) | |
| download | aur-28e23308d4e15c8883b8c36b24e4395487004d95.tar.gz aur-28e23308d4e15c8883b8c36b24e4395487004d95.tar.xz | |
added hashed passwords
Diffstat (limited to 'web/html')
| -rw-r--r-- | web/html/index.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/web/html/index.php b/web/html/index.php index 5814fec9..033a69e6 100644 --- a/web/html/index.php +++ b/web/html/index.php @@ -19,7 +19,10 @@ if (isset($_REQUEST["user"]) || isset($_REQUEST["pass"])) { if (!$login_error) { # Try and authenticate the user # - $dbh = db_connect(); + + #md5 hash it + $_REQUEST["pass"] = md5($_REQUEST["pass"]); + $dbh = db_connect(); $q = "SELECT ID, Suspended FROM Users "; $q.= "WHERE Username = '" . mysql_escape_string($_REQUEST["user"]) . "' "; $q.= "AND Passwd = '" . mysql_escape_string($_REQUEST["pass"]) . "'"; |