fixed excape
This commit is contained in:
parent
f9eb57acd2
commit
ec0581f896
@ -8,17 +8,14 @@ class Crunchbutton_Admin_Auth extends Cana_Model {
|
||||
|
||||
public static function localLogin($email, $password) {
|
||||
$password = self::passwordEncrypt($password);
|
||||
$query = sprintf('
|
||||
SELECT *
|
||||
FROM admin
|
||||
WHERE
|
||||
login="%s"
|
||||
AND pass="%s"
|
||||
AND active=1
|
||||
LIMIT 1',
|
||||
@mysql_real_escape_string($email),
|
||||
@mysql_real_escape_string($password)
|
||||
);
|
||||
$query = '
|
||||
SELECT *
|
||||
FROM admin
|
||||
WHERE
|
||||
login="'.c::db()->escape($email).'"
|
||||
AND pass="'.c::db()->escape($password).'"
|
||||
AND active=1
|
||||
LIMIT 1';
|
||||
|
||||
return Admin::q($query)->get(0);
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user