diff --git a/LaunchServer/source/auth/handler/MySQLAuthHandler.java b/LaunchServer/source/auth/handler/MySQLAuthHandler.java index 67d12ca..56723af 100644 --- a/LaunchServer/source/auth/handler/MySQLAuthHandler.java +++ b/LaunchServer/source/auth/handler/MySQLAuthHandler.java @@ -46,13 +46,13 @@ block.getEntryValue("serverIDColumn", StringConfigEntry.class)); // Prepare SQL queries - queryByUUIDSQL = String.format("SELECT %s, %s, %s, %s FROM %s WHERE %s=?", + queryByUUIDSQL = String.format("SELECT %s, %s, %s, %s FROM %s WHERE %s=? LIMIT 1", uuidColumn, usernameColumn, accessTokenColumn, serverIDColumn, table, uuidColumn); - queryByUsernameSQL = String.format("SELECT %s, %s, %s, %s FROM %s WHERE %s=?", + queryByUsernameSQL = String.format("SELECT %s, %s, %s, %s FROM %s WHERE %s=? LIMIT 1", uuidColumn, usernameColumn, accessTokenColumn, serverIDColumn, table, usernameColumn); - updateAuthSQL = String.format("UPDATE %s SET %s=?, %s=? WHERE %s=?", + updateAuthSQL = String.format("UPDATE %s SET %s=?, %s=? WHERE %s=? LIMIT 1", table, usernameColumn, accessTokenColumn, uuidColumn); - updateServerIDSQL = String.format("UPDATE %s SET %s=? WHERE %s=?", + updateServerIDSQL = String.format("UPDATE %s SET %s=? WHERE %s=? LIMIT 1", table, serverIDColumn, uuidColumn); // Fetch all entries diff --git a/compat/auth/dle.sql b/compat/auth/dle.sql index a2c2c49..633b2bc 100644 --- a/compat/auth/dle.sql +++ b/compat/auth/dle.sql @@ -1 +1 @@ -SELECT name FROM dle_users WHERE (email=? OR name=?) AND password=MD5(MD5(?)) \ No newline at end of file +SELECT name FROM dle_users WHERE (email=? OR name=?) AND password=MD5(MD5(?)) LIMIT 1 diff --git a/compat/auth/joomla.sql b/compat/auth/joomla.sql index 03d7ca9..7c192c5 100644 --- a/compat/auth/joomla.sql +++ b/compat/auth/joomla.sql @@ -1 +1 @@ -SELECT username FROM joomla_users WHERE (email=? OR username=?) AND password=CONCAT_WS(':', MD5(CONCAT(?, SUBSTRING_INDEX(SUBSTRING_INDEX(password, ':', 2), ':', -1))), SUBSTRING_INDEX(SUBSTRING_INDEX(password, ':', 2), ':', -1)) \ No newline at end of file +SELECT username FROM joomla_users WHERE (email=? OR username=?) AND password=CONCAT_WS(':', MD5(CONCAT(?, SUBSTRING_INDEX(SUBSTRING_INDEX(password, ':', 2), ':', -1))), SUBSTRING_INDEX(SUBSTRING_INDEX(password, ':', 2), ':', -1)) LIMIT 1 \ No newline at end of file