diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/user.module | 8 | ||||
| -rw-r--r-- | modules/user/user.module | 8 |
2 files changed, 12 insertions, 4 deletions
diff --git a/modules/user.module b/modules/user.module index 00efa07ae..90744a450 100644 --- a/modules/user.module +++ b/modules/user.module @@ -20,11 +20,15 @@ function sess_read($key) { } function sess_write($key, $value) { - db_query("UPDATE user SET hostname = '". getenv("REMOTE_ADDR") ."', timestamp = '". time() ."' WHERE session = '$key'"); + global $REMOTE_ADDR; + + db_query("UPDATE user SET hostname = '". check_input($REMOTE_ADDR) ."', timestamp = '". time() ."' WHERE session = '$key'"); } function sess_destroy($key) { - db_query("UPDATE user SET hostname = '". getenv("REMOTE_ADDR") ."', timestamp = '". time() ."', session = '' WHERE session = '$key'"); + global $REMOTE_ADDR; + + db_query("UPDATE user SET hostname = '". check_input($REMOTE_ADDR) ."', timestamp = '". time() ."', session = '' WHERE session = '$key'"); } function sess_gc($lifetime) { diff --git a/modules/user/user.module b/modules/user/user.module index 00efa07ae..90744a450 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -20,11 +20,15 @@ function sess_read($key) { } function sess_write($key, $value) { - db_query("UPDATE user SET hostname = '". getenv("REMOTE_ADDR") ."', timestamp = '". time() ."' WHERE session = '$key'"); + global $REMOTE_ADDR; + + db_query("UPDATE user SET hostname = '". check_input($REMOTE_ADDR) ."', timestamp = '". time() ."' WHERE session = '$key'"); } function sess_destroy($key) { - db_query("UPDATE user SET hostname = '". getenv("REMOTE_ADDR") ."', timestamp = '". time() ."', session = '' WHERE session = '$key'"); + global $REMOTE_ADDR; + + db_query("UPDATE user SET hostname = '". check_input($REMOTE_ADDR) ."', timestamp = '". time() ."', session = '' WHERE session = '$key'"); } function sess_gc($lifetime) { |