From 28e23308d4e15c8883b8c36b24e4395487004d95 Mon Sep 17 00:00:00 2001
From: jchu <jchu>
Date: Fri, 21 Jan 2005 14:50:25 +0000
Subject: added hashed passwords

---
 web/lib/acctfuncs.inc | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'web/lib')

diff --git a/web/lib/acctfuncs.inc b/web/lib/acctfuncs.inc
index d27b96f4..e56ceebc 100644
--- a/web/lib/acctfuncs.inc
+++ b/web/lib/acctfuncs.inc
@@ -245,6 +245,9 @@ function process_account_form($UTYPE,$TYPE,$A,$U="",$T="",$S="",$E="",
 		if ($TYPE == "new") {
 			# no errors, go ahead and create the unprivileged user
 			#
+			
+			#md5hash the password
+			$P = md5($P);
 			$q = "INSERT INTO Users (AccountTypeID, Suspended, Username, Email, ";
 			$q.= "Passwd, RealName, LangPreference, IRCNick, NewPkgNotify) ";
 			$q.= "VALUES (1, 0, '".mysql_escape_string($U)."'";
@@ -275,6 +278,9 @@ function process_account_form($UTYPE,$TYPE,$A,$U="",$T="",$S="",$E="",
 		} else {
 			# no errors, go ahead and modify the user account
 			#
+
+			#md5 hash the password
+			$P = md5($P);
 			$q = "UPDATE Users SET ";
 			$q.= "Username = '".mysql_escape_string($U)."'";
 			if ($T) {
-- 
cgit v1.2.3-24-g4f1b