Changeset 3036:7ed4286c8013 for admin/preferences.php

Timestamp:

07/03/15 17:03:26 (10 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Centralizes crypt function of pwd in class.Dotclear.auth.php, closes #1923

File:

• admin/preferences.php (modified) (1 diff)

admin/preferences.php

@@ -102 +102 @@
      try
      {
-          $pwd_check = !empty($_POST['cur_pwd']) && $core->auth->checkPassword(crypt::hmac(DC_MASTER_KEY,$_POST['cur_pwd']));
+          $pwd_check = !empty($_POST['cur_pwd']) && $core->auth->checkPassword($core->auth->crypt($_POST['cur_pwd']));
 
           if ($core->auth->allowPassChange() && !$pwd_check && $user_email != $_POST['user_email']) {