From b399b20dee2752a038a64a8be2c89df142aae280 Mon Sep 17 00:00:00 2001
From: Mike Macgirvin <mike@macgirvin.com>
Date: Fri, 30 Jul 2010 06:09:20 -0700
Subject: mail, i18n, etc.

---
 include/auth.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'include/auth.php')

diff --git a/include/auth.php b/include/auth.php
index 8e9d19d8a..8f9019e01 100644
--- a/include/auth.php
+++ b/include/auth.php
@@ -46,7 +46,7 @@ else {
 
 	if((x($_POST,'auth-params')) && $_POST['auth-params'] == 'login') {
 		$r = q("SELECT * FROM `user` 
-			WHERE `email` = '%s' AND `password` = '%s' LIMIT 1",
+			WHERE `email` = '%s' AND `password` = '%s' AND `blocked` = 0 AND `verified` = 1 LIMIT 1",
 			dbesc(trim($_POST['login-name'])),
 			dbesc($encrypted));
 		if(($r === false) || (! count($r))) {
-- 
cgit v1.2.3