cvs: php-gtk-web / admin-login.php

sfox		Tue Jul 11 00:32:55 2006 UTC

  Modified files:              
    /php-gtk-web	admin-login.php 
  Log:
  - TBH the CVS auth encoding will probably cope beautifully with this anyway, but let's make sure.
  - $user shouldn't have worked there, I forgot to define it... maybe it's worth bringing our php.ini settings into the 21st c?
  
http://cvs.php.net/viewvc.cgi/php-gtk-web/admin-login.php?r1=1.14&r2=1.15&diff_format=u
Index: php-gtk-web/admin-login.php
diff -u php-gtk-web/admin-login.php:1.14 php-gtk-web/admin-login.php:1.15
--- php-gtk-web/admin-login.php:1.14	Mon Jul 10 20:13:19 2006
+++ php-gtk-web/admin-login.php	Tue Jul 11 00:32:55 2006
@@ -9,7 +9,7 @@
 
 if (!isset($_COOKIE['PHP-GTK'])) {
 	if (isset($_POST['submit']) && isset($_POST['pass'])) {
-		verify_password($_POST['user'], $_POST['pass']);
+		$user = verify_password(htmlentities($_POST['user']), htmlentities($_POST['pass']));
 	} else {
 		$user = null;
 		$self = substr($_SERVER['PHP_SELF'], 0, strpos($_SERVER['PHP_SELF'], '.php') + 4);