From 70d88965c795a5e392605fe556df580773a505c3 Mon Sep 17 00:00:00 2001
From: Richard Foote <dicky@phpbb.com>
Date: Mon, 19 Mar 2012 23:19:21 -0400
Subject: [PATCH] [ticket/10708] Check converted passwords for multi-byte
 characters

Check for multi-byte characters in converted passwords.

PHPBB3-10708
---
 phpBB/includes/auth/auth_db.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php
index c20196d019..1c6cdf7832 100644
--- a/phpBB/includes/auth/auth_db.php
+++ b/phpBB/includes/auth/auth_db.php
@@ -163,7 +163,7 @@ function login_db($username, $password, $ip = '', $browser = '', $forwarded_for
 		$password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;
 		$password_new_format = '';
 
-		set_var($password_new_format, stripslashes($password_old_format), 'string');
+		set_var($password_new_format, stripslashes($password_old_format), 'string', true);
 
 		if ($password == $password_new_format)
 		{