Hi,

After my last flurry of activity, I've not had time to work on vegadns
and have just come back to it after a few days.

I found I couldn't log in.

I traced the SQL queries and the password was getting md5 applied twice.

This patch fixes that:

--- vegadns-0.9.9.1/src/functions.php   2005-09-10 17:48:07.000000000 +0100
+++ vegadns-0.9.9.1-working/src/functions.php   2006-04-30
09:50:19.000000000 +0100
@@ -35,7 +35,7 @@
     mysql_query("delete from active_sessions where time < $oldsessions");
     $result = mysql_query("select Email from accounts where
         Email='".mysql_real_escape_string(strtolower($email))."' and
-        Password='".md5($password)."' and
+        Password='".$password."' and
         Status='active' LIMIT 1") or die(mysql_error());
     $resultarray = mysql_fetch_array($result);
     if($resultarray['Email'] != "") {

R.

Reply via email to