github/torrentpier
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier synced 2025-08-24 07:05:47 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

r45

Browse source 
Шифрование паролей пользователей ВАЖНО! сделать всего один единичный запрос к базе UPDATE bb_users SET user_password = MD5(user_password); (если не уверены, спросите на форуме!) git-svn-id: https://torrentpier2.googlecode.com/svn/trunk@45 a8ac35ab-4ca4-ca47-4c2d-a49a94f06293
This commit is contained in:
nanosimbiot 2011-06-29 09:59:18 +00:00
commit 688d528901
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
upload/includes/sessions.php
View file

@ -397,7 +397,7 @@ class user_common
if ($username && $password) if ($username && $password)
{ {
$username_sql = str_replace("\\'", "''", $username); $username_sql = str_replace("\\'", "''", $username);
$password_sql = md5($password); $password_sql = md5(md5($password));
$sql = " $sql = "
SELECT * SELECT *
@ -411,7 +411,7 @@ class user_common
if ($userdata = DB()->fetch_row($sql)) if ($userdata = DB()->fetch_row($sql))
{ {
if (!$userdata['username'] || !$userdata['user_password'] || $userdata['user_id'] == ANONYMOUS || md5($password) !== $userdata['user_password'] || !$userdata['user_active']) if (!$userdata['username'] || !$userdata['user_password'] || $userdata['user_id'] == ANONYMOUS || md5(md5($password)) !== $userdata['user_password'] || !$userdata['user_active'])
{ {
trigger_error('invalid userdata', E_USER_ERROR); trigger_error('invalid userdata', E_USER_ERROR);
} }

4
upload/includes/ucp/usercp_register.php
View file

@ -236,7 +236,7 @@ foreach ($profile_fields as $field => $can_edit)
{ {
$errors[] = 'Введённые пароли не совпадают'; $errors[] = 'Введённые пароли не совпадают';
} }
$db_data['user_password'] = md5($new_pass); $db_data['user_password'] = md5(md5($new_pass));
} }
if ($mode == 'register') if ($mode == 'register')
@ -250,7 +250,7 @@ foreach ($profile_fields as $field => $can_edit)
{ {
if (!empty($cur_pass)) if (!empty($cur_pass))
{ {
$cur_pass_valid = ($pr_data['user_password'] === md5($cur_pass)); $cur_pass_valid = ($pr_data['user_password'] === md5(md5($cur_pass)));
} }
if (!empty($new_pass) && !$cur_pass_valid) if (!empty($new_pass) && !$cur_pass_valid)
{ {