svn commit: r367 - trunk/mapbender/http/php/mod_editFilteredUser.php

Wed May 31 02:15:04 EDT 2006

Author: uli
Date: 2006-05-31 06:15:03+0000
New Revision: 367

Modified:
   trunk/mapbender/http/php/mod_editFilteredUser.php

Log:
md5 string for passwords

Modified: trunk/mapbender/http/php/mod_editFilteredUser.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/php/mod_editFilteredUser.php?view=diff&rev=367&p1=trunk/mapbender/http/php/mod_editFilteredUser.php&p2=trunk/mapbender/http/php/mod_editFilteredUser.php&r1=366&r2=367
==============================================================================

--- trunk/mapbender/http/php/mod_editFilteredUser.php	(original)
+++ trunk/mapbender/http/php/mod_editFilteredUser.php	2006-05-31 06:15:03+0000
@@ -96,23 +96,6 @@
 </head>
 <body>
 <?php
-function setPassword($password){
-	if($password != ""){
-		if (SYS_DBTYPE=="mysql"){
-			$pw = "password('".$password."')";
-		}else{
-			if (MD5 == 'false'){
-				$pw = $password;
-			}else{
-				$pw = "md5('".$password."')";
-			}
-		}
-		return $pw;
-	}
-	else{
-		return false;	
-	}
-}
 #delete
 if($action == 'delete'){
    $sql = "DELETE FROM mb_user WHERE mb_user_id = $1";
@@ -132,10 +115,10 @@
 		echo "<script language='JavaScript'>alert('Username must be unique!');</script>";
 	}
 	else{
-		$sql = "Insert INTO mb_user (mb_user_name, mb_user_password,mb_user_owner, mb_user_description, ";
+		$sql = "Insert INTO mb_user (mb_user_name, mb_user_password, mb_user_owner, mb_user_description, ";
 		$sql .= "mb_user_email, mb_user_phone, mb_user_department, mb_user_resolution) VALUES ";
 		$sql.= "($1,$2,$3,$4,$5,$6,$7,$8)";	
-		$tmpPW = setPassword($password);
+		$tmpPW = md5($password);
 		$v = array($name,$tmpPW,$owner_id,$description,$email,$phone,$department,$resolution);
 		$t = array('s','s','i','s','s','s','s','i');
 		$res = db_prep_query($sql,$v,$t);
@@ -166,7 +149,7 @@
 		$res = db_prep_query($sql,$v,$t);		
 		if($password != ''){
 			$sql = "UPDATE mb_user SET mb_user_password = $1 WHERE mb_user_name = $2";
-			$v = array(setPassword($password), $name);
+			$v = array(md5($password), $name);
 			$t = array('s','s');
 			$res = db_prep_query($sql,$v,$t);
 			if($password && $res){


