diff --git a/inside/ActionParser.php b/inside/ActionParser.php index 5563bcb..b58f1f6 100644 --- a/inside/ActionParser.php +++ b/inside/ActionParser.php @@ -616,7 +616,7 @@ class ActionParser { $error = "user not found.."; } - $sql = sprintf("INSERT INTO `inside_auth_log`(`username`, `password`,`error`) VALUES(%s,%s,%s)",$conn->quoteSmart(scriptParam('username')), $passwordExists, $error); + $sql = sprintf("INSERT INTO `inside_auth_log`(`username`, `password`,`error`) VALUES(%s,%s,%s)",$conn->quoteSmart(scriptParam('username')), $conn->quoteSmart($passwordExists), $conn->quoteSmart($error)); $conn->query($sql); } catch(Exception $e)