sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add strict check to phpass's CheckPassword() method to avoid issues when the method is improperly called.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@24457 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2013-06-21 01:21:12 +00:00
parent 0aed5a2803
commit 473bef521b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-includes/class-phpass.php
View File

@ -253,7 +253,7 @@ class PasswordHash {
if ($hash[0] == '*')
$hash = crypt($password, $stored_hash);
return $hash == $stored_hash;
return $hash === $stored_hash;
}
}