mirrors/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2025-04-26 11:19:55 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixes #1254 fix quote escaping in password

Browse source
This commit is contained in:
zag-adka 2023-01-10 12:56:40 -04:00 • committed by GitHub
parent beca490e8c
commit d9027d2def
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
include/functions_user.inc.php
View file

@ -1168,7 +1168,7 @@ SELECT '.$conf['user_fields']['id'].' AS id,
;'; ;';
$row = pwg_db_fetch_assoc(pwg_query($query)); $row = pwg_db_fetch_assoc(pwg_query($query));
if (isset($row['id']) and $conf['password_verify']($password, $row['password'], $row['id'])) if (isset($row['id']) and $conf['password_verify'](stripslashes($password), $row['password'], $row['id']))
{ {
$user_found = true; $user_found = true;
} }
@ -1184,7 +1184,7 @@ SELECT '.$conf['user_fields']['id'].' AS id,
;'; ;';
$row = pwg_db_fetch_assoc(pwg_query($query)); $row = pwg_db_fetch_assoc(pwg_query($query));
if (isset($row['id']) and $conf['password_verify']($password, $row['password'], $row['id'])) if (isset($row['id']) and $conf['password_verify'](stripslashes($password), $row['password'], $row['id']))
{ {
$user_found = true; $user_found = true;
} }