PHP Classes

Security Problem

Recommend this page to a friend!

      Access user Class  >  All threads  >  Security Problem  >  (Un) Subscribe thread alerts  
Subject:Security Problem
Summary:Security Problem if you know a user
Messages:2
Author:Mike
Date:2005-04-07 10:59:39
Update:2005-04-07 16:53:21
 

  1. Security Problem   Reply   Report abuse  
Picture of Mike Mike - 2005-04-07 10:59:39
Hy,
there is a Security Problem in your class. If you know a User (loginname) and you take the Password "new" you can login without Problems.
The Problem is switch in function check_user($pass).
Perhaps you can take instead this something like this:
...
function check_user($pass,$art)
switch ($art) {
...

Keep going on whith the class... it is a good skript...
bye
Mike

  2. Re: Security Problem   Reply   Report abuse  
Picture of Olaf Lederer Olaf Lederer - 2005-04-07 16:53:21 - In reply to message 1 from Mike
Hallo Mike,

really strange that this is happen...

I changed the class a little bit and hope that these things belong for good to the history.

THANKS!