Quantcast
Channel: Simple Password – LeakedIn
Viewing all articles
Browse latest Browse all 2663

Potential leak of data: Simple Password

$
0
0
Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: ce('#[^A-Za-z0-9@._()']#i', '', $_POST["user_login"]); $password_login = preg_replace('#[^A-Za-z0-9!@._]#i', '', $_POST["password_login"]); $md5password_login = md5($password_login); $sql = mysql_query("SELECT id FROM users WHERE username='$user_login' AND password='$md5password_login' LIMIT 1"); //check for their existance $userCount = mysql_num_rows($sql); //count the number of rows returned if ($userCount == 1) { while($row = mysql_fetch_array($sql)) { $id = $row["id"]; } $_SESSION["id"] […]

Viewing all articles
Browse latest Browse all 2663

Trending Articles