From dfbdc90e0a677ec40379721e51fcdfd4a4f23c34 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Tue, 3 Mar 2009 18:02:18 +0000
Subject: [PATCH] Fix bug class_user.php : the password is not checked in the
 function checked

---
 include/class_user.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/class_user.php b/include/class_user.php
index 08e0341ea..8d15e64f1 100644
--- a/include/class_user.php
+++ b/include/class_user.php
@@ -272,10 +272,10 @@ jrn_def_name,jrn_def_class_deb,jrn_def_class_cred,jrn_type_id,jrn_desc,uj_priv,
     if ( $this->login != 'phpcompta') {
       $pass5=md5($this->pass);
       $sql="select use_admin from ac_users where use_login=$1
-		and use_active=1  and use_pass=$2";
+		and use_active=1  ";
       
       $cn=DbConnect();
-      $res=ExecSqlParam($cn,$sql,array($this->login,$pass5));
+      $res=ExecSqlParam($cn,$sql,array($this->login));
       if ( pg_NumRows($res)==0) exit(__FILE__." ".__LINE__." aucun resultat");
       $this->admin=pg_fetch_result($res,0);
     }