[ticket/13203] Use string_compare method in passwords drivers

PHPBB3-13203
2025-08-19 06:51:33 +02:00 · 2014-10-22 14:54:55 -05:00
parent 2b47ef1266
commit 0bc04a4df0
12 changed files with 19 additions and 13 deletions
--- a/phpBB/phpbb/passwords/driver/salted_md5.php
+++ b/phpBB/phpbb/passwords/driver/salted_md5.php
@@ -107,7 +107,7 @@ class salted_md5 extends base
 			return md5($password) === $hash;
 		}

-		return $hash === $this->hash($password, $hash);
+		return $this->helper->string_compare($hash, $this->hash($password, $hash));
 	}

 	/**