@ core/db/models/user.php: Some security bug fixed