Changeset 65 for trunk/includes

Timestamp:

Feb 5, 2009, 11:03:01 AM (16 years ago)

Author:

george

Message:

• Opraveno: Kontrola přes haš funkci SHA1 nefungovala všude správně.

Location:

trunk/includes

Files:

• global.php (modified) (1 diff)
• global_function.php (modified) (1 diff)

trunk/includes/global.php

@@ -157 +157 @@
 {
   $_SESSION['User'] = $_POST['LoginUser'];
-  $_SESSION['Pass'] = sha1($_POST['LoginPass']);
-
-  $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('".$_SESSION['User']."') AND pass = '".$_SESSION['Pass']."'"));
+  $_SESSION['Pass'] = $_POST['LoginPass'];
+
+  $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('".$_SESSION['User']."') AND pass = sha1('".$_SESSION['Pass']."')"));
   if(!$Line)
   {

trunk/includes/global_function.php

@@ -76 +76 @@
     $Pass = $_SESSION['Pass'];
     $Line = mysql_fetch_array($Database->SQLCommand('SELECT * FROM user WHERE ID = '.$_SESSION['UserID'].'
-      AND GM >= '.$Licence.' AND pass = "'.$Pass.'"'));
+      AND GM >= '.$Licence.' AND pass = sha1("'.$Pass.'")'));
     //  echo "SELECT * FROM user WHERE ID = ".$_SESSION['UserID']." AND GM <= $Licence AND pass = '$Pass'";
     return($Line);