Fixed: FS#3718 - SQL injection checker false positive alert in APS installer

Till Brehm

2014-10-27 0e34bade9cc2fa831f9c8a344b2ebfdf4047848c

 interface/web/login/index.php

@@ -160,7 +160,7 @@
               } else {
                  if(stristr($username, '@')) {
                     //* mailuser login
                     $sql = "SELECT * FROM mail_user WHERE login = '$username'";
                     $sql = "SELECT * FROM mail_user WHERE login = '$username' or email = '$username'";
                     $mailuser = $app->db->queryOneRecord($sql);
                     $user = false;
                     if($mailuser) {