mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-03-28 17:42:57 +01:00
bug 3223 fixed: make sure we have found a user before validating the connection
git-svn-id: http://piwigo.org/svn/branches/2.7@31167 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -1120,7 +1120,7 @@ SELECT '.$conf['user_fields']['id'].' AS id,
|
||||
WHERE '.$conf['user_fields']['username'].' = \''.pwg_db_real_escape_string($username).'\'
|
||||
;';
|
||||
$row = pwg_db_fetch_assoc(pwg_query($query));
|
||||
if ($conf['password_verify']($password, $row['password'], $row['id']))
|
||||
if (isset($row['id']) and $conf['password_verify']($password, $row['password'], $row['id']))
|
||||
{
|
||||
log_user($row['id'], $remember_me);
|
||||
trigger_notify('login_success', stripslashes($username));
|
||||
|
||||
Reference in New Issue
Block a user