mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-16 21:54:00 +02:00
[ticket/13203] Use string_compare method in passwords drivers
PHPBB3-13203
This commit is contained in:
@@ -47,6 +47,6 @@ class sha1 extends base
|
||||
*/
|
||||
public function check($password, $hash, $user_row = array())
|
||||
{
|
||||
return (strlen($hash) == 40) ? $hash === sha1($password) : false;
|
||||
return (strlen($hash) == 40) ? $this->helper->string_compare($hash, sha1($password)) : false;
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user