diff options
Diffstat (limited to 'LedgerSMB/Auth/DB.pm')
| -rwxr-xr-x | LedgerSMB/Auth/DB.pm | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/LedgerSMB/Auth/DB.pm b/LedgerSMB/Auth/DB.pm index e4f5bc32..0a474af1 100755 --- a/LedgerSMB/Auth/DB.pm +++ b/LedgerSMB/Auth/DB.pm @@ -162,7 +162,7 @@ sub session_create { "INSERT INTO session (session_id, users_id, token, transaction_id) VALUES(?, (SELECT id FROM users - WHERE username = ?), ?, ?);" + WHERE username = SESSION_USER), ?, ?);" ); # this is assuming that the login is safe, which might be a bad assumption @@ -194,7 +194,7 @@ sub session_create { my ( $newSessionID, $newToken ) = $fetchSequence->fetchrow_array; #create a new session - $createNew->execute( $newSessionID, $login, $newToken, $newTransactionID ) + $createNew->execute( $newSessionID, $newToken, $newTransactionID ) || $lsmb->dberror( __FILE__ . ':' . __LINE__ . ": Create new session: \n". $lsmb->{dbh}->errstr() ); |