diff options
| -rw-r--r-- | includes/user.inc | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/includes/user.inc b/includes/user.inc index 65a891cb9..bdc62c3ce 100644 --- a/includes/user.inc +++ b/includes/user.inc @@ -1,17 +1,17 @@ <? class User { - function User($userid) { - $result = db_query("SELECT * FROM users WHERE userid = '$userid' && STATUS = 2"); + function User($userid, $passwd) { + $result = db_query("SELECT * FROM users WHERE LOWER(userid) = LOWER('$userid') && passwd = PASSWORD('$passwd') && STATUS = 2"); if (db_num_rows($result) == 1) { foreach (db_fetch_row($result) as $key=>$value) { $field = mysql_field_name($result, $key); $this->$field = stripslashes($value); $this->field[] = $field; } + db_query("UPDATE users SET last_access = '". time() ."', last_host = '$GLOBALS[REMOTE_HOST]' WHERE id = $this->id"); } } - function User($userid, $passwd) { - $result = db_query("SELECT * FROM users WHERE LOWER(userid) = LOWER('$userid') && passwd = PASSWORD('$passwd') && STATUS = 2"); + function User($userid) { + $result = db_query("SELECT * FROM users WHERE userid = '$userid' && STATUS = 2"); if (db_num_rows($result) == 1) { foreach (db_fetch_row($result) as $key=>$value) { $field = mysql_field_name($result, $key); $this->$field = stripslashes($value); $this->field[] = $field; } - db_query("UPDATE users SET last_access = '". time() ."', last_host = '$GLOBALS[REMOTE_HOST]' WHERE id = $this->id"); } } } |