Browse Source

Security: capitalization of mods username is significant

pull/40/head
8chan Admin 10 years ago
committed by czaks
parent
commit
93f748e6a8
  1. 2
      inc/mod/auth.php

2
inc/mod/auth.php

@ -76,7 +76,7 @@ function generate_salt() {
function login($username, $password) {
global $mod, $config;
$query = prepare("SELECT `id`, `type`, `boards`, `password`, `version` FROM ``mods`` WHERE `username` = :username");
$query = prepare("SELECT `id`, `type`, `boards`, `password`, `version` FROM ``mods`` WHERE BINARY `username` = :username");
$query->bindValue(':username', $username);
$query->execute() or error(db_error($query));

Loading…
Cancel
Save