Changeset 205

Timestamp:

11/04/2006 07:12:26 AM (3 years ago)

Author:

DotMG

Message:

error of [204] : unable to login if password contains special characters.

Files:

• trunk/actions/usersettings.php (modified) (4 diffs)

trunk/actions/usersettings.php

@@ -251 +251 @@
         {
                 // check password
-                $oldpass = $this->GetSafeVar('oldpass', 'post'); //can be current password or hash sent as password reminder
-                $password = $this->GetSafeVar('password', 'post');
-                $password_confirm = $this->GetSafeVar('password_confirm', 'post');
+                $oldpass = $_POST['oldpass']; //can be current password or hash sent as password reminder
+                $password = $_POST['password'];
+                $password_confirm = $_POST['password_confirm'];
                 $update_option = $this->GetSafeVar('update_option', 'post');
                 
@@ -384 +384 @@
                 else if ($register == '1' || $register == '2') // otherwise, proceed to registration
                 {
-                        $name = trim($this->GetSafeVar('name', 'post'));
+                        $name = trim($_POST['name']);
                         $email = trim($this->GetSafeVar('email', 'post'));
-                        $password = $this->GetSafeVar('password', 'post');
-                        $confpassword = $this->GetSafeVar('confpassword', 'post');
+                        $password = $_POST['password'];
+                        $confpassword = $_POST['confpassword'];
 
                         // validate input
@@ -460 +460 @@
         elseif  (isset($_POST['action']) && ($_POST['action'] == 'updatepass'))
         {
-        $name = trim($this->GetSafeVar('yourname', 'post'));
+                $name = trim($_POST['yourname']);
                 if (strlen($name) == 0) // empty username       
                 {
@@ -471 +471 @@
                         $username_temp_highlight = INPUT_ERROR_STYLE;
                 }
-                elseif (!($this->LoadUser($this->GetSafeVar('yourname', 'post')))) //check if user exists
+                elseif (!($this->LoadUser($_POST['yourname']))) //check if user exists
                 {
                         $newerror = ERROR_NON_EXISTENT_USERNAME;
                         $username_temp_highlight = INPUT_ERROR_STYLE;
                 }
-                elseif ($existingUser = $this->LoadUser($this->GetSafeVar('yourname', 'post')))  // if user name already exists, check password
+                elseif ($existingUser = $this->LoadUser($_POST['yourname']))  // if user name already exists, check password
                 {
                         // updatepassword