mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-30 21:40:43 +02:00
Code Issues Releases Wiki Activity

[feature/passwords] Correctly supply hash salt and settings to bcrypt

Browse Source 
PHPBB3-11610
This commit is contained in:
Marc Alexander
2013-06-15 12:10:03 +02:00
parent c9afda5a65
commit d3d317a2de
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
phpBB/includes/crypto/driver/bcrypt.php
View File

@@ -61,9 +61,8 @@ class phpbb_crypto_driver_bcrypt extends phpbb_crypto_driver_base
*/
public function check($password, $hash)
{
$salt = substr($hash, strpos($hash, '$', 4) + 1, 22);
var_dump('bcrypt salt: ' . $salt . ' with length ' . strlen($salt));
if (strlen($salt) != 22)
$salt = substr($hash, 0, 29);
if (strlen($salt) != 29)
{
return false;
}