From 1a7277570bb19d0a5ebfa4abdac1fbce1d1b955f Mon Sep 17 00:00:00 2001
From: Francesco Turco <fturco@fastmail.fm>
Date: Fri, 22 Dec 2017 12:29:25 +0100
Subject: [PATCH] fix two-factor authenticaton

---
 classes/pref/prefs.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/pref/prefs.php b/classes/pref/prefs.php
index fac4b941..1eb28ba2 100644
--- a/classes/pref/prefs.php
+++ b/classes/pref/prefs.php
@@ -887,7 +887,7 @@ class Pref_Prefs extends Handler_Protected {
 
 		if ($authenticator->check_password($_SESSION["uid"], $password)) {
 
-			$sth = $this->pdo->query("SELECT salt
+			$sth = $this->pdo->prepare("SELECT salt
 				FROM ttrss_users
 				WHERE id = ?");
 			$sth->execute([$_SESSION['uid']]);
-- 
2.39.5