summaryrefslogtreecommitdiffstats
path: root/web/html
diff options
context:
space:
mode:
authorjchu <jchu>2005-01-21 15:50:25 +0100
committerjchu <jchu>2005-01-21 15:50:25 +0100
commit28e23308d4e15c8883b8c36b24e4395487004d95 (patch)
tree892449d3e5e125f5fc27bab2d534856a5a83de23 /web/html
parent91c3f94ff9df319b548cd332566198b72f8124cd (diff)
downloadaur-28e23308d4e15c8883b8c36b24e4395487004d95.tar.gz
aur-28e23308d4e15c8883b8c36b24e4395487004d95.tar.xz
added hashed passwords
Diffstat (limited to 'web/html')
-rw-r--r--web/html/index.php5
1 files changed, 4 insertions, 1 deletions
diff --git a/web/html/index.php b/web/html/index.php
index 5814fec9..033a69e6 100644
--- a/web/html/index.php
+++ b/web/html/index.php
@@ -19,7 +19,10 @@ if (isset($_REQUEST["user"]) || isset($_REQUEST["pass"])) {
if (!$login_error) {
# Try and authenticate the user
#
- $dbh = db_connect();
+
+ #md5 hash it
+ $_REQUEST["pass"] = md5($_REQUEST["pass"]);
+ $dbh = db_connect();
$q = "SELECT ID, Suspended FROM Users ";
$q.= "WHERE Username = '" . mysql_escape_string($_REQUEST["user"]) . "' ";
$q.= "AND Passwd = '" . mysql_escape_string($_REQUEST["pass"]) . "'";