users/login.php: sql refactoring

git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@97 a1433add-5e2c-0410-b055-b7f2511e0802
postfixadmin-2.3
David Goodwin 17 years ago
parent fd67e6b120
commit d56ada24e2

@ -35,22 +35,17 @@ if ($_SERVER['REQUEST_METHOD'] == "POST")
$fUsername = escape_string ($_POST['fUsername']);
$fPassword = escape_string ($_POST['fPassword']);
$query = "SELECT password FROM $table_mailbox WHERE username='$fUsername' AND active='1'";
if ('pgsql'==$CONF['database_type'])
{
$query = "SELECT password FROM $table_mailbox WHERE username='$fUsername' AND active=true";
}
$active = db_get_boolean(True);
$query = "SELECT password FROM $table_mailbox WHERE username='$fUsername' AND active=$active";
$result = db_query ($query);
if ($result['rows'] == 1)
{
$row = db_array ($result['result']);
$password = pacrypt ($fPassword, $row['password']);
$query = "SELECT * FROM $table_mailbox WHERE username='$fUsername' AND password='$password' AND active='1'";
if ('pgsql'==$CONF['database_type'])
{
$query = "SELECT * FROM $table_mailbox WHERE username='$fUsername' AND password='$password' AND active=true";
}
$query = "SELECT * FROM $table_mailbox WHERE username='$fUsername' AND password='$password' AND active=$active";
$result = db_query ($query);
if ($result['rows'] != 1)
{

Loading…
Cancel
Save