Changeset 31167

Timestamp:

May 15, 2015, 2:44:57 PM (10 years ago)

Author:

plg

Message:

bug 3223 fixed: make sure we have found a user before validating the connection

File:

• branches/2.7/include/functions_user.inc.php (modified) (1 diff)

branches/2.7/include/functions_user.inc.php

@@ -1121 +1121 @@
 ;';
   $row = pwg_db_fetch_assoc(pwg_query($query));
-  if ($conf['password_verify']($password, $row['password'], $row['id']))
+  if (isset($row['id']) and $conf['password_verify']($password, $row['password'], $row['id']))
   {
     log_user($row['id'], $remember_me);