MOD #138 : Stockage des passwords hashés

[cl7.git] / php / controller.php

diff --git a/php/controller.php b/php/controller.php
index f3fd468..cad4352 100644 (file)
--- a/php/controller.php
+++ b/php/controller.php
@@ -48,7 +48,7 @@ class Controller
                array(
                   $id,
                   $_POST['pseudo'],
-                  $_POST['pass1'],
+                  sha1($_POST['pass1']),
                   $_POST['clan_nom'],
                   $_POST['clan_tag'],
                   $_POST['nom'],
@@ -78,7 +78,7 @@ class Controller
          {
             pg_query("BEGIN");
             pg_query_params("UPDATE participants SET pseudo = $1 WHERE id = $2", array($_POST['pseudo'], $this->participant->info->id));
-            pg_query_params("UPDATE participants SET password = $1 WHERE id = $2", array($_POST['pass1'], $this->participant->info->id));
+            pg_query_params("UPDATE participants SET password = $1 WHERE id = $2", array(sha1($_POST['pass1']), $this->participant->info->id));
             pg_query_params("UPDATE participants SET clan_nom = $1 WHERE id = $2", array($_POST['clan_nom'], $this->participant->info->id));
             pg_query_params("UPDATE participants SET clan_tag = $1 WHERE id = $2", array($_POST['clan_tag'], $this->participant->info->id));
             pg_query_params("UPDATE participants SET nom = $1 WHERE id = $2", array($_POST['nom'], $this->participant->info->id));