X-Git-Url: http://andersk.mit.edu/gitweb/sql-web.git/blobdiff_plain/51722d40e2a84a6697f8f081afb5f6142f552100..da0d337f574b14bf8679701bc4d40fd20af312ee:/lib/security.lib.php diff --git a/lib/security.lib.php b/lib/security.lib.php index 0fc8a91..32532bc 100644 --- a/lib/security.lib.php +++ b/lib/security.lib.php @@ -11,7 +11,7 @@ class Login { $this->p = $p; if (is_numeric($u)) { $this->id = $u; - $opt = sprintf(" UserId = '%s'", mysql_escape_string($u)); + $opt = sprintf(" Username = '%s' OR UserId = '%s'", mysql_escape_string($u), mysql_escape_string($u)); } else { $opt = sprintf(" Username = '%s'", mysql_escape_string($u)); $opt .= (is_null($p)?'':sprintf(" AND Password='%s'", mysql_escape_string(base64_encode($p))));