mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-08-18 01:01:01 +00:00
Merge pull request #189 from cosme12/patch-16
SQL Injection fix [IMPORTANT]
This commit is contained in:
@@ -178,6 +178,7 @@ class Account {
|
|||||||
|
|
||||||
private function Login() {
|
private function Login() {
|
||||||
global $database,$session,$form;
|
global $database,$session,$form;
|
||||||
|
$_POST['user'] = mysql_real_escape_string($_POST['user']);
|
||||||
if(!isset($_POST['user']) || $_POST['user'] == "") {
|
if(!isset($_POST['user']) || $_POST['user'] == "") {
|
||||||
$form->addError("user",LOGIN_USR_EMPTY);
|
$form->addError("user",LOGIN_USR_EMPTY);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user