Changeset 3627:9bccfc2257ad for plugins/antispam

Timestamp:

12/19/17 17:27:59 (8 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Use PHP 5.5+ new password functions, closes #2182

Warnings:

• $core->auth->crypt($pwd) doesn't return twice the same result for a single $pwd, so if you need this old behaviour use the $core->auth->cryptLegacy($pwd) instead.
• $core->auth->checkPassword($pwd) must be used with an uncrypted password string as argument.
• if you need a unique UID/key, use http::browserUID(DC_MASTER_KEY.$core->auth->userID().$core->auth->cryptLegacy($core->auth->userID())). (may be refined in future)

File:

• plugins/antispam/inc/lib.dc.antispam.php (modified) (2 diffs)

plugins/antispam/inc/lib.dc.antispam.php

@@ -134 +134 @@
           $code =
           pack('a32',$core->auth->userID()).
-          pack('H*',$core->auth->crypt($core->auth->getInfo('user_pwd')));
+          pack('H*',$core->auth->cryptLegacy($core->auth->getInfo('user_pwd')));
           return bin2hex($code);
      }
@@ -161 +161 @@
           }
 
-          if ($core->auth->crypt($rs->user_pwd) != $pwd) {
+          if ($core->auth->cryptLegacy($rs->user_pwd) != $pwd) {
                return false;
           }