Changeset 3231:bf7f869cfed9 for plugins/antispam

Timestamp:

03/25/16 12:43:18 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Allow different cryptographic algorithm for user password, choosen algo must provide result longer or equal than 40 characters (as default sha1), closes #1922

The constant DC_CRYPT_ALGO should be defined in config.php, and users will have to use recovery password procedure to set a new one according to the choosen algorithm.

File:

• plugins/antispam/inc/lib.dc.antispam.php (modified) (1 diff)

plugins/antispam/inc/lib.dc.antispam.php

@@ -143 +143 @@
 
           $user_id = trim(@pack('a32',substr($code,0,32)));
-          $pwd = @unpack('H40hex',substr($code,32,40));
+          $pwd = @unpack('H*hex',substr($code,32));
 
           if ($user_id === false || $pwd === false) {