From 704872ef6347a6e1062fb8489c6c510698b8733e Mon Sep 17 00:00:00 2001
From: ravenlp <ravenlp@gmail.com>
Date: Sat, 16 Feb 2008 22:20:25 +0000
Subject: [PATCH]

---
 classes/user.class.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/user.class.php b/classes/user.class.php
index 1913e7a..d986cee 100644
--- a/classes/user.class.php
+++ b/classes/user.class.php
@@ -46,7 +46,7 @@ class user extends Conexion_Mysql {
 
 	function validateUser($username="", $password="") {
 
-		if ($this->ejecutarConsulta("SELECT id_user, login, password  FROM ".$this->conf->tablePrefix."users WHERE login='".sql_escape($username)."' AND password='".$password."'")) {
+		if ($this->ejecutarConsulta("SELECT id_user, login, password  FROM ".$this->conf->tablePrefix."users WHERE login='".$this->sql_escape($username)."' AND password='".$password."'")) {
 			if ($this->contarRegistros()>0) {
 				$register=$this->obtenerRegistro();
 				$_SESSION['user_id']=$register["id_user"];