admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Improve security : function isAdmin recheck the password

Browse source
This commit is contained in:
sparkyx 2023-01-14 14:07:06 +01:00
parent 4679238d37
commit e29412c2ba
3 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
include/class/noalyss_user.class.php
View file

@ -657,25 +657,25 @@ class Noalyss_User
* synomym for isAdmin,
* @deprecated
*/
function Admin()
function Admin():int
{
return $this->isAdmin();
}
/**
* @brief Check if an user is an admin
* @brief Check if an user is an admin and check also his password
*
* @return 1 for yes 0 for no
*/
function isAdmin()
function isAdmin():int
{
$this->admin=0;
$pass5=$this->password;
$sql="select count(*) from ac_users where use_login=$1
and use_active=1 and use_admin=1 ";
and use_active=1 and use_admin=1 and use_pass=$2 ";
$cn=new Database();
$this->admin=$cn->get_value($sql, array($this->login));
$this->admin=$cn->get_value($sql, array($this->login,$pass5));
return $this->admin;
}