mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-31 05:50:42 +02:00
[feature/passwords] Increase test coverage to 100% of methods
Obsolete code that is impossible to hit has been removed and the logic of the salted md5 driver has been changed to correctly implement the phpBB 3.0 phpbb_hash() function. PHPBB3-11610
This commit is contained in:
@@ -41,7 +41,13 @@ class salted_md5 extends \phpbb\passwords\driver\base
|
||||
{
|
||||
if (($settings = $this->get_hash_settings($setting)) === false)
|
||||
{
|
||||
return false;
|
||||
// Return md5 of password if settings do not
|
||||
// comply with our standards. This will only
|
||||
// happen if pre-determined settings are
|
||||
// directly passed to the driver. The manager
|
||||
// will not do this. Same as the old hashing
|
||||
// implementatio in phpBB 3.0
|
||||
return md5($password);
|
||||
}
|
||||
}
|
||||
else
|
||||
@@ -59,13 +65,7 @@ class salted_md5 extends \phpbb\passwords\driver\base
|
||||
$output = $settings['full'];
|
||||
$output .= $this->helper->hash_encode64($hash, 16);
|
||||
|
||||
if (strlen($output) == 34)
|
||||
{
|
||||
return $output;
|
||||
}
|
||||
|
||||
// Should we really just return the md5 of the password? O.o
|
||||
return md5($password);
|
||||
return $output;
|
||||
}
|
||||
|
||||
/**
|
||||
|
Reference in New Issue
Block a user