SA-MP Forums Archive
mysql login allows any password - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+--- Thread: mysql login allows any password (/showthread.php?tid=343703)



mysql login allows any password - logoster - 18.05.2012

anyone can login to any account with any password
pawn Код:
stock LoginPlayer(playerid,const password[])
{
    new EscapedText[60];
    new Query[128];
    mysql_real_escape_string(password, EscapedText);
    format(Query,sizeof(Query),"SELECT * FROM `Users` WHERE `Username` = '%s' AND `Password` = md5('%s')",GetName(playerid),EscapedText);
    mysql_query(Query);
    mysql_store_result();
    if(mysql_num_rows() != 0)
    {
        SendClientMessage(playerid,COLOR_LIME,"You have been logged in!");
        LoadStats(playerid);
    }
    else
    {
            SendClientMessage(playerid,COLOR_RED,"Wrong password!");
        Kick(playerid);
    }
    mysql_free_result();
    return 1;
}



Re: mysql login allows any password - ProjectGANTON - 18.05.2012

Wrong.
I don't have time to script a login/registration system.
So, here:

https://sampforum.blast.hk/showthread.php?tid=133571


Re: mysql login allows any password - Mandrakke - 18.05.2012

the only reason to you can login with any password is mysql_num_rows() returning -1 (this happens when the mysql couldn't connect to the database).

so, verify with OnQueryError callback which errors occurs when these querys are being executed.