xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-30 15:17:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #188 from NIKO28it/patch-1

Browse Source 
FIX HACK
This commit is contained in:
yi12345
2013-02-23 07:51:41 -08:00
parent 63d516c490 af3b816f92
commit 6deede1a0d
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Profile.php
+4
View File
@@ -95,8 +95,12 @@ class Profile {
global $database,$session,$form; global $database,$session,$form;
if($post['pw2'] == $post['pw3']) { if($post['pw2'] == $post['pw3']) {
if($database->login($session->username,$post['pw1'])) { if($database->login($session->username,$post['pw1'])) {
if ($_POST['uid'] != $session->uid){
die("Hacking Attempr");
} else {
$database->updateUserField($post['uid'],"password",md5($post['pw2']),1); $database->updateUserField($post['uid'],"password",md5($post['pw2']),1);
} }
}
else { else {
$form->addError("pw",LOGIN_PW_ERROR); $form->addError("pw",LOGIN_PW_ERROR);
} }