1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-08-13 20:24:08 +02:00

[ticket/13203] Use string_compare method in passwords drivers

PHPBB3-13203
This commit is contained in:
Marc Alexander
2014-10-22 14:54:55 -05:00
parent 2b47ef1266
commit 0bc04a4df0
12 changed files with 19 additions and 13 deletions

View File

@@ -46,6 +46,6 @@ class sha1_smf extends base
*/
public function check($password, $hash, $user_row = array())
{
return (strlen($hash) == 40) ? $hash === $this->hash($password, $user_row) : false;
return (strlen($hash) == 40) ? $this->helper->string_compare($hash, $this->hash($password, $user_row)) : false;
}
}