Fix error on updating user master pass

2026-03-07 00:46:59 +01:00 · 2013-10-25 08:55:46 +02:00
parent 77eb7385ca
commit 4dc540e929
1 changed files with 3 additions and 3 deletions
--- a/inc/users.class.php
+++ b/inc/users.class.php
@@ -1184,8 +1184,8 @@ class SP_Users {
        }

        $query = "UPDATE usrData SET
-                        user_mPass = '$strUserMPwd[0]',
-                        user_mIV = '$strUserMPwd[1]',
+                        user_mPass = '".DB::escape($strUserMPwd[0])."',
+                        user_mIV = '".DB::escape($strUserMPwd[1])."',
                        user_lastUpdateMPass = UNIX_TIMESTAMP()
                        WHERE user_id = " . (int) $this->userId . " LIMIT 1";

@@ -1371,4 +1371,4 @@ class SP_Users {

        return FALSE;
    }
-}
+}