Added addslashes() to check for existing users, because some characters

can break the query (old users containing ', for example).
2004-01-04 22:58:28 +00:00
parent d8e24b78ea
commit 79619daf93
1 changed files with 1 additions and 1 deletions
@@ -513,7 +513,7 @@
                $newid=null;
                //check if it exists (by username) and get its id
                $user_exists = true;
-                $user_data = get_record("user","username",$user->username);
+                $user_data = get_record("user","username",addslashes($user->username));
                if (!$user_data) {
                    $user_exists = false;
                } else {