repair old passwords

benjamw · Jul 24, 2014 · b1d2812 · b1d2812
1 parent c3eaba6
commit b1d2812
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/includes/login.inc.php b/includes/login.inc.php
@@ -146,6 +146,14 @@
 		WHERE p_username = '".sani($_POST['txtUsername'])."'
 	";
 	$player = $mysql->fetch_assoc($query, __LINE__, __FILE__);
+
+	// check for an old password and update if needed
+	if ((false !== $player) && (32 === strlen($player['p_password']))) {
+		if (md5($_POST['pwdPassword']) === $player['p_password']) {
+			$player['p_password'] = password_make($_POST['pwdPassword']);
+			$mysql->insert(T_PLAYER, array('p_password' => $player['p_password']), " WHERE `p_id` = '{$player['p_id']}' ");
+		}
+	}
 }
 else // we need to log in
 {