mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-30 21:40:43 +02:00
Some changes to the returned data format + cleanups
git-svn-id: file:///svn/phpbb/trunk@3622 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -1,24 +1,27 @@
|
||||
<?php
|
||||
|
||||
// Authentication plug-ins is largely down to Sergey Kanareykin, our thanks to him.
|
||||
//
|
||||
// Authentication plug-ins is largely down to
|
||||
// Sergey Kanareykin, our thanks to him.
|
||||
// This is for authentication via the integrated user table
|
||||
//
|
||||
// You can do any kind of checking you like here ... the return data format is
|
||||
// either the resulting row of user information, an integer zero (indicating an
|
||||
// inactive user) or some error string
|
||||
function login_db(&$username, &$password)
|
||||
{
|
||||
global $db, $board_config;
|
||||
global $db, $config;
|
||||
|
||||
$sql = "SELECT user_id, username, user_password, user_email, user_active
|
||||
FROM " . USERS_TABLE . "
|
||||
WHERE username = '" . str_replace("\'", "''", $username) . "'";
|
||||
WHERE username = '" . $db->sql_escape($username) . "'";
|
||||
$result = $db->sql_query($sql);
|
||||
|
||||
if ( $row = $db->sql_fetchrow($result) )
|
||||
if ($row = $db->sql_fetchrow($result))
|
||||
{
|
||||
$db->sql_freeresult($result);
|
||||
if ( md5($password) == $row['user_password'] && $row['user_active'] )
|
||||
if (md5($password) == $row['user_password'])
|
||||
{
|
||||
return $row;
|
||||
return (empty($row['user_active'])) ? 0 : $row;
|
||||
}
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user