BlackCatDevelopment / BlackCatCMS

BlackCat CMS is a PHP5, HTML5 content management system
https://blackcat-cms.org
Other
11 stars 9 forks source link

Logical error in user preferences (save) #246

Closed webbird closed 10 years ago

webbird commented 10 years ago

Working on v1.1 I found a logical error in ajax_save.php. If the user changes settings that are not stored in the basic users table (there is a table for options like time zone), the update statement returns a number of 0 rows affected. In this case, the password is treated as invalid.

Fixed for v1.1, but may occur in 1.0.3, too.