From f02e35ac53997f056aa534ee3be219663f436900 Mon Sep 17 00:00:00 2001 From: Frederic Guillot Date: Wed, 3 Jul 2013 22:05:10 -0400 Subject: [PATCH] Add check for the username at login --- model.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/model.php b/model.php index 9a1a0e7..67bfa8a 100644 --- a/model.php +++ b/model.php @@ -484,11 +484,12 @@ function get_config() } -function get_user() +function get_user($username) { return \PicoTools\singleton('db') ->table('config') ->columns('username', 'password', 'language') + ->eq('username', $username) ->findOne(); } @@ -506,7 +507,7 @@ function validate_login(array $values) if ($result) { - $user = get_user(); + $user = get_user($values['username']); if ($user && \password_verify($values['password'], $user['password'])) {