ecki/lpmj6
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update21.php

Browse Source 
Remove single quotes for $user and $pass inside $query, since $pdo->quote() will quote the string for use in a query.
This commit is contained in:
Ricardo González
2021-10-12 16:24:01 -05:00
committed by GitHub
parent eeb4267820
commit 95c5441b5d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
11/21.php
+1 -1
View File
@@ -12,7 +12,7 @@
$user = mysql_entities_fix_string($pdo, $_POST['user']); $user = mysql_entities_fix_string($pdo, $_POST['user']);
$pass = mysql_entities_fix_string($pdo, $_POST['pass']); $pass = mysql_entities_fix_string($pdo, $_POST['pass']);
$query = "SELECT * FROM users WHERE user='$user' AND pass='$pass'"; $query = "SELECT * FROM users WHERE user=$user AND pass=$pass";
//Etc… //Etc…