[UNTESTED] patched SQL injection #2

 in lib/checkLogin.php