From 7e3c2c1c736b19a66946f72974e3574eb6c3789c Mon Sep 17 00:00:00 2001
From: bradymiller <bradymiller@users.sourceforge.net>
Date: Tue, 6 Dec 2011 14:52:33 -0800
Subject: [PATCH] high priority sql-injection security fix

---
 interface/login/validateUser.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/interface/login/validateUser.php b/interface/login/validateUser.php
index 569571df7..7a7ebd224 100644
--- a/interface/login/validateUser.php
+++ b/interface/login/validateUser.php
@@ -1,13 +1,17 @@
 <?php
 //VicarePlus :: This file checks the hashing algorithm used for the password in the initial login.
 //VicarePlus :: This file is called by a jquery function in login.php
+
+// Use new security method
+$fake_register_globals=false;
+$sanitize_all_escapes=true;
+
 $ignoreAuth=true;
 include_once("../globals.php");
 include_once("$srcdir/sql.inc");
 $user = $_GET['u'];
-$authDB = sqlQuery("select password,length(password) as passlength from users where username = '$user'");
+$authDB = sqlQuery("select length(password) as passlength from users where username = ?", array($user) );
 $passlength = $authDB['passlength'];
-$pw = $authDB['password'];
 //VicarePlus :: If the length of the password is 32, 'md5' hashing algorithm is used.
 if ($passlength == 32)
 {
-- 
2.11.4.GIT