Merge pull request #78 from ConradBunton/patch-2

Update account.login.php
paintballrefjosh · Dec 13, 2017 · 0f2c984 · 0f2c984
2 parents 057d166 + b149053
commit 0f2c984
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/inc/account/account.login.php b/inc/account/account.login.php
@@ -21,9 +21,9 @@
 if(isset($_GET['exec']) && $_GET['exec'] == "login")
 {
 
-	$login = $_POST['login'];
+	$login = $RDB->real_escape_string($_POST['login']);
 	$pass = $Account->sha_password($login, $_POST['pass']);
-	$account_id = $RDB->selectCell("SELECT `id` FROM `account` WHERE `username` = '".$_POST['login']."' LIMIT 1");
+	$account_id = $RDB->selectCell("SELECT `id` FROM `account` WHERE `username` = '$login' LIMIT 1");
 
 	// initiate the login array, and send it in
 	$params = array('username' => $login, 'sha_pass_hash' => $pass);