diff options
| author | 8chan Admin <admin@8chan.co> | 2014-02-13 01:04:32 +0000 |
|---|---|---|
| committer | czaks <marcin@6irc.net> | 2016-05-05 11:39:12 +0200 |
| commit | 93f748e6a83964cf40a22073acd0e2511eb4ca0b (patch) | |
| tree | 159ce4c06fe6aceabfd3f0f246008cd77a4a8c9a /inc/mod/auth.php | |
| parent | d310abc95c80a35f6cb4f8e5119e1d46bdb09b14 (diff) | |
Security: capitalization of mods username is significant
Diffstat (limited to 'inc/mod/auth.php')
| -rw-r--r-- | inc/mod/auth.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/inc/mod/auth.php b/inc/mod/auth.php index d877b89f..7f98e8a9 100644 --- a/inc/mod/auth.php +++ b/inc/mod/auth.php @@ -76,7 +76,7 @@ function generate_salt() { function login($username, $password) { global $mod, $config; - $query = prepare("SELECT `id`, `type`, `boards`, `password`, `version` FROM ``mods`` WHERE `username` = :username"); + $query = prepare("SELECT `id`, `type`, `boards`, `password`, `version` FROM ``mods`` WHERE BINARY `username` = :username"); $query->bindValue(':username', $username); $query->execute() or error(db_error($query)); |