diff options
Diffstat (limited to 'nonpublic/index.php')
| -rwxr-xr-x | nonpublic/index.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nonpublic/index.php b/nonpublic/index.php index 0646714e..d46b0a10 100755 --- a/nonpublic/index.php +++ b/nonpublic/index.php @@ -10,7 +10,7 @@ session_start(); // alte Session - falls vorhanden - wiederherstellen... if (!IsSet($_SESSION['UID'])) { - $sql = "select * from User where Nick = '$user'"; + $sql = "select * from User where Nick = '". $_POST["user"]. "'"; $userstring = mysql_query($sql, $con); @@ -18,7 +18,7 @@ if (!IsSet($_SESSION['UID'])) { $user_anz = mysql_num_rows($userstring); if ($user_anz == 1) { // Check, ob User angemeldet wird... - if (mysql_result($userstring, 0, "Passwort") == PassCrypt($password)) { // Passwort ok... + if (mysql_result($userstring, 0, "Passwort") == PassCrypt($_POST["password"])) { // Passwort ok... // Session wird eingeleitet und Session-Variablen gesetzt.. // session_start(); session_name("Himmel"); |