[Wifidog] More MySQL Problems (With Patch) in WifiDog-Auth SQL code,

Rikhardur.EGILSSON at oecd.org Rikhardur.EGILSSON at oecd.org
Thu Sep 30 10:54:58 EDT 2004


I think this is definately a problem with MySQL, it needs the following
change to accept the query.

The code should also run normally on PostgreSQL.


--- classes/Security.php.old	2004-09-30 16:49:17.225470526 +0200
+++ classes/Security.php	2004-09-30 16:49:59.811366029 +0200
@@ -50,7 +50,7 @@
     //$this->session->dump();
     $user = $this->session->get(SESS_USERNAME_VAR);
     $password_hash = $this->session->get(SESS_PASSWORD_HASH_VAR);
-    $db->ExecSqlUniqueRes("SELECT * FROM users NATURAL JOIN administrators
WHERE (user_id='$user' OR email='$user') AND pass='$password_hash'",
$user_info, false);
+    $db->ExecSqlUniqueRes("SELECT * FROM users NATURAL JOIN administrators
WHERE (users.user_id='$user' OR email='$user') AND pass='$password_hash'",
$user_info, false);
     if(empty($user_info))
       {
 	echo '<p class=error>'._("You do not have administrator
privileges")."</p>\n";



-------------- next part --------------
_______________________________________________
Wifidog mailing list
Wifidog at isf.waglo.com
http://isf.waglo.com/mailman/listinfo/wifidog_isf.waglo.com


More information about the Wifidog mailing list