edb/inside
Archived
9
0 Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

Removes legacy MySQL password support

Browse Source
This commit is contained in:
nikolark committed 2015-08-05 15:52:07 +02:00
1 parent 6190f6e643
commit b22be5427f
2 files changed
+3 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

inside/ldap.php
+1 -2
View File
@@ -115,9 +115,8 @@ function legacy_get_user_from_mail($mail) {
function legacy_authenticate($username, $password) { function legacy_authenticate($username, $password) {
$conn = db_connect(); $conn = db_connect();
/* query db with form data (password, username) */ /* query db with form data (password, username) */
$sql = sprintf("SELECT id FROM din_user WHERE username = %s AND (password = PASSWORD(%s) or password = OLD_PASSWORD(%s))", $sql = sprintf("SELECT id FROM din_user WHERE username = %s AND password = PASSWORD(%s)",
$conn->quoteSmart($username), $conn->quoteSmart($username),
$conn->quoteSmart($password),
$conn->quoteSmart($password)); $conn->quoteSmart($password));
$result = $conn->query($sql); $result = $conn->query($sql);
vaktliste/App/Mapper/UserMapper.php
+2 -2
View File
@@ -38,7 +38,7 @@ class App_Mapper_UserMapper extends App_Mapper_Mapper {
//$this->deleteStmt = self::$PDO->prepare( //$this->deleteStmt = self::$PDO->prepare(
// "DELETE FROM din_user WHERE id=?"); // "DELETE FROM din_user WHERE id=?");
$this->findByLoginStmt = self::$PDO->prepare( $this->findByLoginStmt = self::$PDO->prepare(
"SELECT * FROM din_user WHERE username=? AND ( password=PASSWORD(?) or password=OLD_PASSWORD(?) )"); "SELECT * FROM din_user WHERE username=? AND password=PASSWORD(?)");
} }
protected function doCreateObject(array $array) { protected function doCreateObject(array $array) {
@@ -123,4 +123,4 @@ class App_Mapper_UserMapper extends App_Mapper_Mapper {
} }
} }
?> ?>