maybe thats howto escape the user

This commit is contained in:
Thies Mueller 2021-01-09 23:28:51 +01:00
parent 00096d3791
commit b03cd25cd7

View File

@ -40,8 +40,8 @@ if(isset($_GET['send']) ) {
if($user === false) { if($user === false) {
$error = '<span class="badge badge-pill badge-warning"><b>no user found</b></span>'; $error = '<span class="badge badge-pill badge-warning"><b>no user found</b></span>';
} }
if($user['username'] !== $_POST['username']){ if($user['username'] == ""){
$error = '<span class="badge badge-pill badge-warning"><b>no user found/invalid user</b></span>'; $error = '<span class="badge badge-pill badge-warning"><b>no user found</b></span>';
} }
if($user['activated'] == "1"){ if($user['activated'] == "1"){
$error = '<span class="badge badge-pill badge-warning"><b>user already activated!</b></span>'; $error = '<span class="badge badge-pill badge-warning"><b>user already activated!</b></span>';