mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-31 22:10:45 +02:00
[ticket/16697] Remove $CP$ prefix when updating hashes and support phpBB2 check
The $CP$ prefix is not part of the actual password hash. phpBB2 passwords converted do currently include a phpass hash of the md5 of the password. Make sure these are correctly checked. PHPBB3-16697
This commit is contained in:
@@ -106,7 +106,8 @@ class update_hashes extends \phpbb\cron\task\base
|
||||
|
||||
while ($row = $this->db->sql_fetchrow($result))
|
||||
{
|
||||
$new_hash = $this->passwords_manager->hash($row['user_password'], array($this->default_type));
|
||||
$old_hash = preg_replace('/^\$CP\$/', '', $row['user_password']);
|
||||
$new_hash = $this->passwords_manager->hash($old_hash, array($this->default_type));
|
||||
|
||||
// Increase number so we know that users were selected from the database
|
||||
$affected_rows++;
|
||||
|
Reference in New Issue
Block a user