added safeguard for password conversion
This commit is contained in:
@@ -38,7 +38,15 @@ while ($r = sql_fetch_array($rs))
|
|||||||
}
|
}
|
||||||
$pwhash = crypt::secondStagePasswordEncryption($password);
|
$pwhash = crypt::secondStagePasswordEncryption($password);
|
||||||
|
|
||||||
|
$oldpw = sql_value("SELECT `password` FROM `user` WHERE `user_id`='&1'", '', $r['user_id']);
|
||||||
sql("UPDATE `user` SET `password`='&1' WHERE `user_id`='&2'", $pwhash, $r['user_id']);
|
sql("UPDATE `user` SET `password`='&1' WHERE `user_id`='&2'", $pwhash, $r['user_id']);
|
||||||
|
|
||||||
|
if ($pwhash != sql_value("SELECT `password` FROM `user` WHERE `user_id`='&1'", '', $r['user_id']))
|
||||||
|
{
|
||||||
|
sql("UPDATE `user` SET `password`='&1' WHERE `user_id`='&2'", $oldpw, $r['user_id']);
|
||||||
|
echo "Error!\nCould not store new password. Password field not updated to 128 chars?\n\n";
|
||||||
|
break;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
mysql_free_result($rs);
|
mysql_free_result($rs);
|
||||||
|
|||||||
Reference in New Issue
Block a user