aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth
diff options
context:
space:
mode:
Diffstat (limited to 'phpBB/includes/auth')
-rw-r--r--phpBB/includes/auth/auth_apache.php4
-rw-r--r--phpBB/includes/auth/auth_db.php4
-rw-r--r--phpBB/includes/auth/auth_ldap.php4
3 files changed, 6 insertions, 6 deletions
diff --git a/phpBB/includes/auth/auth_apache.php b/phpBB/includes/auth/auth_apache.php
index 9c08558660..d9b00f5435 100644
--- a/phpBB/includes/auth/auth_apache.php
+++ b/phpBB/includes/auth/auth_apache.php
@@ -20,8 +20,8 @@ function login_apache(&$username, &$password)
if ($php_auth_user && $php_auth_pw)
{
- $sql = "SELECT user_id, username, user_password, user_email, user_active
- FROM " . USERS_TABLE . "
+ $sql = ' user_id, username, user_password, user_passchg, user_email, user_active
+ FROM ' . USERS_TABLE . "
WHERE username = '" . $db->sql_escape($username) . "'";
$result = $db->sql_query($sql);
diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php
index a5de9e1724..927c3ecfe7 100644
--- a/phpBB/includes/auth/auth_db.php
+++ b/phpBB/includes/auth/auth_db.php
@@ -14,8 +14,8 @@ function login_db(&$username, &$password)
{
global $db, $config;
- $sql = "SELECT user_id, username, user_password, user_email, user_active
- FROM " . USERS_TABLE . "
+ $sql = 'SELECT user_id, username, user_password, user_passchg, user_email, user_active
+ FROM ' . USERS_TABLE . "
WHERE username = '" . $db->sql_escape($username) . "'";
$result = $db->sql_query($sql);
diff --git a/phpBB/includes/auth/auth_ldap.php b/phpBB/includes/auth/auth_ldap.php
index b8c289c2ab..1b89a02d20 100644
--- a/phpBB/includes/auth/auth_ldap.php
+++ b/phpBB/includes/auth/auth_ldap.php
@@ -34,8 +34,8 @@ function login_ldap(&$username, &$password)
{
@ldap_close($ldap);
- $sql = "SELECT user_id, username, user_password, user_email, user_active
- FROM " . USERS_TABLE . "
+ $sql ='SELECT user_id, username, user_password, user_passchg, user_email, user_active
+ FROM ' . USERS_TABLE . "
WHERE username = '" . $db->sql_escape($username) . "'";
$result = $db->sql_query($sql);