[ticket/12352] Do not check hashes that don't have the necessary length

This should significantly reduce the time spent on checking hashes of
passwords that should be converted.

PHPBB3-12352

phpBB/phpbb/passwords/driver/sha1.php

@@ -47,6 +47,6 @@ class sha1 extends base
 	*/
 	public function check($password, $hash, $user_row = array())
 	{
-		return $hash === sha1($password);
+		return (strlen($hash) == 40) ? $hash === sha1($password) : false;
 	}
 }