fix password change for mysql auth

git-svn-id: http://www.observium.org/svn/observer/trunk@1232 61d68cd4-352d-0410-923a-c4978735b2b8
This commit is contained in:
Adam Amstrong
2010-06-21 15:39:43 +00:00
parent e3cf6bb819
commit 8dfad7f27d
2 changed files with 26 additions and 4 deletions

View File

@ -3,7 +3,7 @@
function authenticate($username,$password)
{
$encrypted = md5($password);
$sql = "SELECT username FROM `users` WHERE `username`='".$_SESSION['username']."' AND `password`='".$encrypted."'";
$sql = "SELECT username FROM `users` WHERE `username`='".$username."' AND `password`='".$encrypted."'";
$query = mysql_query($sql);
$row = @mysql_fetch_array($query);
if($row['username'] && $row['username'] == $username)
@ -18,10 +18,10 @@ function passwordscanchange()
return 1;
}
function changepassword($username,$newpassword)
function changepassword($username,$password)
{
$encrypted = md5($password);
$sql = "UPDATE `users` SET password`='$encrypted' WHERE `username`='".$_SESSION['username']."'";
$sql = "UPDATE `users` SET `password` = '$encrypted' WHERE `username`='".$username."'";
$query = mysql_query($sql);
}
@ -56,4 +56,4 @@ function get_userid($username)
return $row['user_id'];
}
?>
?>