Changeset 306

Timestamp:

Mar 13, 2008, 7:56:42 PM (17 years ago)

Author:

george

Message:

Oprava sloupce databáze I na sha_pass_hash.

Location:

minimanager

Files:

• edit.php (modified) (1 diff)
• img/emoticons/big_smile.gif (added)
• img/emoticons/mad.gif (added)
• login.php (modified) (2 diffs)
• register.php (modified) (2 diffs)
• user.php (modified) (1 diff)

minimanager/edit.php

@@ -186 +186 @@
  $sql->connect($realm_db['addr'], $realm_db['user'], $realm_db['pass'], $realm_db['name']);
 
- $new_pass = ($sql->quote_smart($_POST['pass']) != sha1(strtoupper($user_name).":******")) ? "I='".$sql->quote_smart($_POST['pass'])."', " : "";
+ $new_pass = ($sql->quote_smart($_POST['pass']) != sha1(strtoupper($user_name).":******")) ? "sha_pass_hash='".$sql->quote_smart($_POST['pass'])."', " : "";
  $new_mail = $sql->quote_smart(trim($_POST['mail']));
  $new_tbc = $sql->quote_smart(trim($_POST['tbc']));

minimanager/login.php

@@ -27 +27 @@
  if (strlen($user_name) > 255 || strlen($user_pass) > 255) redirect("login.php?error=1");
  
- $result = $sql->query("SELECT id,gmlevel,username FROM account WHERE username='$user_name' AND I='$user_pass' ");
+ $result = $sql->query("SELECT id,gmlevel,username FROM account WHERE username='$user_name' AND sha_pass_hash='$user_pass' ");
 
  if ($sql->num_rows($result) == 1) {
@@ -142 +142 @@
  $user_pass  = $sql->quote_smart($_COOKIE['p_hash']);
 
- $result = $sql->query("SELECT username,gmlevel,id FROM account WHERE username='$user_name' AND I='$user_pass'");
+ $result = $sql->query("SELECT username,gmlevel,id FROM account WHERE username='$user_name' AND sha_pass_hash='$user_pass'");
 
  if ($sql->num_rows($result)) {

minimanager/register.php

@@ -344 +344 @@
  $hash = $sql->quote_smart($_GET['h']);
 
- $result = $sql->query("SELECT id,username FROM account WHERE I = '$hash'");
+ $result = $sql->query("SELECT id,username FROM account WHERE sha_pass_hash = '$hash'");
 
  if ($sql->num_rows($result) == 1){
@@ -350 +350 @@
         $id = $sql->result($result, 0, 'id');
         if (substr(sha1(strtoupper($sql->result($result, 0, 'username'))),0,7) == $pass){
-                $sql->query("UPDATE account SET I=SHA1(CONCAT(UPPER('$username'),':',UPPER('$pass'))) WHERE id = '$id'");
+                $sql->query("UPDATE account SET sha_pass_hash=SHA1(CONCAT(UPPER('$username'),':',UPPER('$pass'))) WHERE id = '$id'");
                 redirect("login.php");
                 }

minimanager/user.php

@@ -769 +769 @@
  $username = $sql->quote_smart($_POST['username']);
  $pass = $sql->quote_smart($_POST['pass']);
- $user_pass_change = ($pass != sha1(strtoupper($username).":******")) ? "username='$username',I='$pass'," : "";
+ $user_pass_change = ($pass != sha1(strtoupper($username).":******")) ? "username='$username',sha_pass_hash='$pass'," : "";
  
  $mail = (isset($_POST['mail']) && $_POST['mail'] != '') ? $sql->quote_smart($_POST['mail']) : "";