aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth/auth_db.php
diff options
context:
space:
mode:
authorNils Adermann <naderman@naderman.de>2007-02-08 22:11:14 +0000
committerNils Adermann <naderman@naderman.de>2007-02-08 22:11:14 +0000
commit56a93bdfdddde618fe826c23c9151086f9540860 (patch)
tree5badf493ac976a48e8de22411610affa6019e6b3 /phpBB/includes/auth/auth_db.php
parent766e311ff35b486a2f01b1cb2cf4fef3df290825 (diff)
downloadforums-56a93bdfdddde618fe826c23c9151086f9540860.tar
forums-56a93bdfdddde618fe826c23c9151086f9540860.tar.gz
forums-56a93bdfdddde618fe826c23c9151086f9540860.tar.bz2
forums-56a93bdfdddde618fe826c23c9151086f9540860.tar.xz
forums-56a93bdfdddde618fe826c23c9151086f9540860.zip
- Pruning doesn't lower user post counts anymore [Bug #7676]
- Better resync explanations in ACP - relative link to board shouldn't result in an empty link [Bug #7762] - allow spaces to define multiple classes [Bug #7700] - forgot addslashes for password conversion [Bug #7530] - adjusted get_post_data call in mcp_post to retrieve read tracking info [Bug #7538] - fixed sorting in reports/queue by properly generating the pagination links [Bug #7666] - send UTF-8 charset header in database_update.php [Bug #7564] git-svn-id: file:///svn/phpbb/trunk@6974 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/includes/auth/auth_db.php')
-rw-r--r--phpBB/includes/auth/auth_db.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php
index 3be896cfd6..baf193ecdb 100644
--- a/phpBB/includes/auth/auth_db.php
+++ b/phpBB/includes/auth/auth_db.php
@@ -98,9 +98,9 @@ function login_db(&$username, &$password)
// If the password convert flag is set we need to convert it
if ($row['user_pass_convert'])
{
- // in phpBB2 passwords were used exactly as they were sent
+ // in phpBB2 passwords were used exactly as they were sent, with addslashes applied
$password_old_format = isset($_REQUEST['password']) ? (string) $_REQUEST['password'] : '';
- $password_old_format = (STRIP) ? stripslashes($password_old_format) : $password_old_format;
+ $password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;
$password_new_format = '';
set_var($password_new_format, $password_old_format, 'string');