diff options
author | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2008-07-26 07:43:18 +0000 |
---|---|---|
committer | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2008-07-26 07:43:18 +0000 |
commit | 392354df0a4f2c21aabad2f1b527448251a60f99 (patch) | |
tree | ab34820cef4990e4139326ccd2e507c5731d216c /lib/class/user.class.php | |
parent | 975af37b254ebc74533f1562005dccf75ef0f021 (diff) | |
download | ampache-392354df0a4f2c21aabad2f1b527448251a60f99.tar.gz ampache-392354df0a4f2c21aabad2f1b527448251a60f99.tar.bz2 ampache-392354df0a4f2c21aabad2f1b527448251a60f99.zip |
switched to sha() password encryption not using sha2 because of limitations of amarok, also added some caching and fixed some misc bugs
Diffstat (limited to 'lib/class/user.class.php')
-rw-r--r-- | lib/class/user.class.php | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/lib/class/user.class.php b/lib/class/user.class.php index 2cdcf251..4d50f5ba 100644 --- a/lib/class/user.class.php +++ b/lib/class/user.class.php @@ -360,7 +360,7 @@ class User extends database_object { Error::add('password',_("Error Passwords don't match")); } - if (Error::$state) { + if (Error::occurred()) { return false; } @@ -593,7 +593,7 @@ class User extends database_object { /* Now Insert this new user */ $sql = "INSERT INTO `user` (`username`, `fullname`, `email`, `password`, `access`, `create_date`) VALUES" . " ('$username','$fullname','$email',PASSWORD('$password'),'$access','" . time() ."')"; - $db_results = Dba::query($sql); + $db_results = Dba::write($sql); if (!$db_results) { return false; } @@ -613,9 +613,11 @@ class User extends database_object { */ public function update_password($new_password) { + $new_password = hash('sha1',$new_password); + $new_password = Dba::escape($new_password); - $sql = "UPDATE `user` SET `password`=PASSWORD('$new_password') WHERE `id`='$this->id'"; - $db_results = Dba::query($sql); + $sql = "UPDATE `user` SET `password`='$new_password' WHERE `id`='$this->id'"; + $db_results = Dba::write($sql); } // update_password @@ -641,7 +643,7 @@ class User extends database_object { /* Calculate their total Bandwidth Useage */ $sql = "SELECT `song`.`size` FROM `song` LEFT JOIN `object_count` ON `song`.`id`=`object_count`.`object_id` " . "WHERE `object_count`.`user`='$this->id' AND `object_count`.`object_type`='song'"; - $db_results = Dba::query($sql); + $db_results = Dba::read($sql); while ($r = Dba::fetch_assoc($db_results)) { $total = $total + $r['size']; |