Update21.php

Remove single quotes for $user and $pass inside $query, since $pdo->quote() will quote the string for use in a query.
2021-10-12 16:24:01 -05:00
parent eeb4267820
commit 95c5441b5d
1 changed files with 1 additions and 1 deletions
@@ -12,7 +12,7 @@

  $user  = mysql_entities_fix_string($pdo, $_POST['user']);
  $pass  = mysql_entities_fix_string($pdo, $_POST['pass']);
-  $query = "SELECT * FROM users WHERE user='$user' AND pass='$pass'";
+  $query = "SELECT * FROM users WHERE user=$user AND pass=$pass";

  //Etc…