0ct0pu5/forkbb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

For migration, we do not need to support the old password hash

Browse source
This commit is contained in:
Visman 2018-07-27 00:25:15 +07:00
parent ed926835ea
commit 102dc6a5e1
1 changed files with 1 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
app/Models/Pages/Auth.php
View file

@ -99,20 +99,8 @@ class Auth extends Page
} elseif ($user->isUnverified) {
$v->addError('Account is not activated', 'w');
} else {
$authorized = false;
$hash = $user->password;
// For FluxBB by Visman 1.5.10.74 and above
if (\strlen($hash) == 40) {
if (\hash_equals($hash, sha1($password . $this->c->SALT1))) {
$hash = \password_hash($password, \PASSWORD_DEFAULT);
$user->password = $hash;
$authorized = true;
}
} else {
$authorized = \password_verify($password, $hash);
}
// ошибка в пароле
if (! $authorized) {
if (! \password_verify($password, $user->password)) {
$v->addError('Wrong user/pass');
} else {
// перезаписываем ip админа и модератора - Visman