code

service/login.class.php

@@ -1162,7 +1162,7 @@ class login {
             if (!$rls) {
                 $str = "Database Error, Try Later.";
             } else {
-                $sql = "INSERT INTO public.ra_online_user_password_history (user_login, password, create_user, create_date) VALUES ('" . $login . "', " . common::check_input($new_password) . ", '" . $login . "', now());";
+                $sql = "INSERT INTO public.ra_online_user_password_history (user_login, password, create_user, create_date) VALUES ('" . $login . "', '" . common::check_input($new_password) . "', '" . $login . "', now());";
                 common::excuteUpdateSql($sql);
                 $str = "success";
             }

utils/utils.class.php

@@ -73,7 +73,7 @@ class utils {
         $str = trim($str, $sep);
         $str = trim($str);
         if (empty($str) && $str !== "0" && $str !== 0)
-            return "1<>1";
+            return "in ('') and 1<>1";
         $str = strtolower($str);
         if (utils::checkExist($str, $sep)) {
             $aa = explode($sep, $str);