diff options
| author | Friendika <info@friendika.com> | 2011-09-18 19:53:45 -0700 |
|---|---|---|
| committer | Friendika <info@friendika.com> | 2011-09-18 19:53:45 -0700 |
| commit | 5b3f6459392ba6f417cfc5cb0d38094c009c6913 (patch) | |
| tree | d98c801e79dc3542cf89769d7b943f1b8292a38b /include | |
| parent | 8bf6a29d4e05af5d461da3f01999785dc12ee7da (diff) | |
| download | volse-hubzilla-5b3f6459392ba6f417cfc5cb0d38094c009c6913.tar.gz volse-hubzilla-5b3f6459392ba6f417cfc5cb0d38094c009c6913.tar.bz2 volse-hubzilla-5b3f6459392ba6f417cfc5cb0d38094c009c6913.zip | |
account expiration structures
Diffstat (limited to 'include')
| -rw-r--r-- | include/api.php | 2 | ||||
| -rw-r--r-- | include/auth.php | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/include/api.php b/include/api.php index 5d008c290..74b4aaf6e 100644 --- a/include/api.php +++ b/include/api.php @@ -55,7 +55,7 @@ // process normal login request $r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) - AND `password` = '%s' AND `blocked` = 0 AND `verified` = 1 LIMIT 1", + AND `password` = '%s' AND `blocked` = 0 AND `account_expired` = 0 AND `verified` = 1 LIMIT 1", dbesc(trim($user)), dbesc(trim($user)), dbesc($encrypted) diff --git a/include/auth.php b/include/auth.php index b7b96bdc0..1f16b3504 100644 --- a/include/auth.php +++ b/include/auth.php @@ -49,7 +49,7 @@ if((isset($_SESSION)) && (x($_SESSION,'authenticated')) && ((! (x($_POST,'auth-p } $r = q("SELECT `user`.*, `user`.`pubkey` as `upubkey`, `user`.`prvkey` as `uprvkey` - FROM `user` WHERE `uid` = %d LIMIT 1", + FROM `user` WHERE `uid` = %d AND `blocked` = 0 AND `account_expired` = 0 AND `verified` = 1 LIMIT 1", intval($_SESSION['uid']) ); @@ -186,7 +186,7 @@ else { $r = q("SELECT `user`.*, `user`.`pubkey` as `upubkey`, `user`.`prvkey` as `uprvkey` FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) - AND `password` = '%s' AND `blocked` = 0 AND `verified` = 1 LIMIT 1", + AND `password` = '%s' AND `blocked` = 0 AND `account_expired` = 0 AND `verified` = 1 LIMIT 1", dbesc(trim($_POST['openid_url'])), dbesc(trim($_POST['openid_url'])), dbesc($encrypted) |