From 473bef521ba14ebb73a809eed2d1ff1b688783d3 Mon Sep 17 00:00:00 2001
From: Andrew Nacin <nacin@git.wordpress.org>
Date: Fri, 21 Jun 2013 01:21:12 +0000
Subject: [PATCH] Add strict check to phpass's CheckPassword() method to avoid
 issues when the method is improperly called.

git-svn-id: https://develop.svn.wordpress.org/trunk@24457 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-includes/class-phpass.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-includes/class-phpass.php b/wp-includes/class-phpass.php
index dcdf3803b5..2fed5d7685 100644
--- a/wp-includes/class-phpass.php
+++ b/wp-includes/class-phpass.php
@@ -253,7 +253,7 @@ class PasswordHash {
 		if ($hash[0] == '*')
 			$hash = crypt($password, $stored_hash);
 
-		return $hash == $stored_hash;
+		return $hash === $stored_hash;
 	}
 }