0ct0pu5/image-heberg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Utilisation de hash_equals recommandé pour la comparaison des hash

Browse source
This commit is contained in:
Anael Mobilia 2016-11-14 11:12:37 +01:00
parent c513ce6077
commit a3870f4822
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
classes/utilisateurObject.class.php
View file

@ -211,7 +211,7 @@ class utilisateurObject {
}
// Si les mots de passe ne correspondent pas... on retourne un sessionObject vide
if ($this->getPassword() !== $values->pass) {
if (!hash_equals($values->pass, $this->getPassword())) {
return FALSE;
}