From: Andrew Dolgov <fox@fakecake.org>
Date: Fri, 27 Jan 2012 08:27:27 +0000 (+0400)
Subject: authenticate_user: check for missing login when selecting salt
X-Git-Tag: 1.5.10~26
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=5081319e23daad80694701866e7aa0297f02ca53;p=tt-rss.git

authenticate_user: check for missing login when selecting salt
---

diff --git a/include/functions.php b/include/functions.php
index 3ace20f8..44331d72 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -715,6 +715,10 @@
 				$result = db_query($link, "SELECT salt FROM ttrss_users WHERE
 					login = '$login'");
 
+				if (db_num_rows($result) != 1) {
+					return false;
+				}
+
 				$salt = db_fetch_result($result, 0, "salt");
 
 				if ($salt == "") {