mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-04 07:47:34 +02:00
- always use convert error message for unconverted incorrect passwords [Bug #10893]
git-svn-id: file:///svn/phpbb/trunk@7576 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -126,7 +126,7 @@ function login_db(&$username, &$password)
|
|||||||
$row['user_pass_convert'] = 0;
|
$row['user_pass_convert'] = 0;
|
||||||
$row['user_password'] = md5($password_new_format);
|
$row['user_password'] = md5($password_new_format);
|
||||||
}
|
}
|
||||||
else if (preg_match('/[\x80-\xFF]/', $password_old_format))
|
else
|
||||||
{
|
{
|
||||||
// Although we weren't able to convert this password we have to
|
// Although we weren't able to convert this password we have to
|
||||||
// increase login attempt count to make sure this cannot be exploited
|
// increase login attempt count to make sure this cannot be exploited
|
||||||
|
Reference in New Issue
Block a user