Changeset 3627:9bccfc2257ad for inc/admin/lib.moduleslist.php

Timestamp:

12/19/17 17:27:59 (8 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Use PHP 5.5+ new password functions, closes #2182

Warnings:

• $core->auth->crypt($pwd) doesn't return twice the same result for a single $pwd, so if you need this old behaviour use the $core->auth->cryptLegacy($pwd) instead.
• $core->auth->checkPassword($pwd) must be used with an uncrypted password string as argument.
• if you need a unique UID/key, use http::browserUID(DC_MASTER_KEY.$core->auth->userID().$core->auth->cryptLegacy($core->auth->userID())). (may be refined in future)

File:

• inc/admin/lib.moduleslist.php (modified) (2 diffs)

inc/admin/lib.moduleslist.php

@@ -1253 +1253 @@
                || !empty($_POST['fetch_pkg']) && !empty($_POST['pkg_url']))
           {
-               if (empty($_POST['your_pwd']) || !$this->core->auth->checkPassword($this->core->auth->crypt($_POST['your_pwd']))) {
+               if (empty($_POST['your_pwd']) || !$this->core->auth->checkPassword($_POST['your_pwd'])) {
                     throw new Exception(__('Password verification failed'));
                }
@@ -2033 +2033 @@
                     || !empty($_POST['fetch_pkg']) && !empty($_POST['pkg_url']))
                {
-                    if (empty($_POST['your_pwd']) || !$this->core->auth->checkPassword($this->core->auth->crypt($_POST['your_pwd']))) {
+                    if (empty($_POST['your_pwd']) || !$this->core->auth->checkPassword($_POST['your_pwd'])) {
                          throw new Exception(__('Password verification failed'));
                     }