aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth/auth_db.php
diff options
context:
space:
mode:
authorNils Adermann <naderman@naderman.de>2008-11-24 00:20:33 +0000
committerNils Adermann <naderman@naderman.de>2008-11-24 00:20:33 +0000
commit07e9b83a3de0264916a058b9cf180b91b297604f (patch)
tree386aed44943159d6634f74ee756c4073d5dbab19 /phpBB/includes/auth/auth_db.php
parent8427ae3fd4bd0055931579d18cb9d43d69f72a90 (diff)
downloadforums-07e9b83a3de0264916a058b9cf180b91b297604f.tar
forums-07e9b83a3de0264916a058b9cf180b91b297604f.tar.gz
forums-07e9b83a3de0264916a058b9cf180b91b297604f.tar.bz2
forums-07e9b83a3de0264916a058b9cf180b91b297604f.tar.xz
forums-07e9b83a3de0264916a058b9cf180b91b297604f.zip
- updated all code to use the request class instead of any direct access to
super globals - disabled super globals in common.php. See commit r9101 for more information - cleaned up/simplified a few lines along the way. git-svn-id: file:///svn/phpbb/trunk@9102 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/includes/auth/auth_db.php')
-rw-r--r--phpBB/includes/auth/auth_db.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php
index 402f22f827..2744b16c53 100644
--- a/phpBB/includes/auth/auth_db.php
+++ b/phpBB/includes/auth/auth_db.php
@@ -100,9 +100,15 @@ function login_db(&$username, &$password)
/*if ($row['user_pass_convert'])
{
// in phpBB2 passwords were used exactly as they were sent, with addslashes applied
+ $disabled = request::super_globals_disabled();
+ request::enable_super_globals();
$password_old_format = isset($_REQUEST['password']) ? (string) $_REQUEST['password'] : '';
$password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;
$password_new_format = '';
+ if ($disabled)
+ {
+ request::disable_super_globals();
+ }
set_var($password_new_format, stripslashes($password_old_format), 'string');