SQL Injection fixed

This commit is contained in:
cosme12
2015-08-31 11:39:38 -03:00
parent 8b839534f1
commit f384cea18d
+1
View File
@@ -178,6 +178,7 @@ class Account {
private function Login() {
global $database,$session,$form;
$_POST['user'] = mysql_real_escape_string($_POST['user']);
if(!isset($_POST['user']) || $_POST['user'] == "") {
$form->addError("user",LOGIN_USR_EMPTY);
}