mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-08-01 14:30:32 +02:00
Code Issues Releases Wiki Activity

[feature/passwords] Correctly supply hash salt and settings to bcrypt

Browse Source 
PHPBB3-11610
This commit is contained in:
Marc Alexander
2013-06-15 12:10:03 +02:00
parent c9afda5a65
commit d3d317a2de
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
phpBB/includes/crypto/driver/bcrypt.php
View File

@@ -61,9 +61,8 @@ class phpbb_crypto_driver_bcrypt extends phpbb_crypto_driver_base
*/ */
public function check($password, $hash) public function check($password, $hash)
{ {
$salt = substr($hash, strpos($hash, '$', 4) + 1, 22); $salt = substr($hash, 0, 29);
var_dump('bcrypt salt: ' . $salt . ' with length ' . strlen($salt)); if (strlen($salt) != 29)
if (strlen($salt) != 22)
{ {
return false; return false;
} }