fix login query

This commit is contained in:
Frank Harris 2025-12-05 15:16:12 -05:00
parent a70990359c
commit 28eb2671d5

View file

@ -82,7 +82,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$debug_messages[] = 'missing username or password';
} else {
$safe = mysqli_real_escape_string($db, $username);
$sql = "SELECT user_id, users_login, users_passwd, users_pass_hash, users_role, users_lang, users_theme FROM {$table_prefix}users WHERE users_login = '$safe' LIMIT 1";
$sql = "SELECT * FROM {$table_prefix}users WHERE users_login = '$safe' LIMIT 1";
$debug_messages[] = 'SQL: ' . $sql;
$res = mysqli_query($db, $sql);
if ($res && mysqli_num_rows($res) === 1) {