From 102dc6a5e11055686928c5308debab0253ec8466 Mon Sep 17 00:00:00 2001 From: Visman Date: Fri, 27 Jul 2018 00:25:15 +0700 Subject: [PATCH] For migration, we do not need to support the old password hash --- app/Models/Pages/Auth.php | 14 +------------- 1 file changed, 1 insertion(+), 13 deletions(-) diff --git a/app/Models/Pages/Auth.php b/app/Models/Pages/Auth.php index b9d2166e..49e16b6e 100644 --- a/app/Models/Pages/Auth.php +++ b/app/Models/Pages/Auth.php @@ -99,20 +99,8 @@ class Auth extends Page } elseif ($user->isUnverified) { $v->addError('Account is not activated', 'w'); } else { - $authorized = false; - $hash = $user->password; - // For FluxBB by Visman 1.5.10.74 and above - if (\strlen($hash) == 40) { - if (\hash_equals($hash, sha1($password . $this->c->SALT1))) { - $hash = \password_hash($password, \PASSWORD_DEFAULT); - $user->password = $hash; - $authorized = true; - } - } else { - $authorized = \password_verify($password, $hash); - } // ошибка в пароле - if (! $authorized) { + if (! \password_verify($password, $user->password)) { $v->addError('Wrong user/pass'); } else { // перезаписываем ip админа и модератора - Visman