mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-18 22:41:28 +02:00
[ticket/13203] Use string_compare method in passwords drivers
PHPBB3-13203
This commit is contained in:
@@ -54,7 +54,7 @@ class md5_mybb extends base
|
||||
else
|
||||
{
|
||||
// Works for myBB 1.1.x, 1.2.x, 1.4.x, 1.6.x
|
||||
return $hash === md5(md5($user_row['user_passwd_salt']) . md5($password));
|
||||
return $this->helper->string_compare($hash, md5(md5($user_row['user_passwd_salt']) . md5($password)));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user