Closed cengizcoskun closed 9 years ago
Is this required? We already have loaded user and just to match password in the $user->password === $password
condition:
$user = Users::findFirst(array('username=:username:', 'bind' => array(':username' => $username)));
// ...
if (isset($roles['login']) && $user->password === $password) {
Ohh sorry. Yes its true.
Password control added.