diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2016-11-22 20:20:05 +0100 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2016-11-22 20:20:05 +0100 |
| commit | d5c0422f17b5a09cd499f82cdf4b72397c45d509 (patch) | |
| tree | 4aedce0e57b2c8d7b070c7c4afdd51ce4683d48d | |
| parent | ea9ebb1c95e0cac5f232fc53d1f0bdcc9a108096 (diff) | |
| download | dokuwiki-d5c0422f17b5a09cd499f82cdf4b72397c45d509.tar.gz dokuwiki-d5c0422f17b5a09cd499f82cdf4b72397c45d509.zip | |
authpdo - use type safe comparison on passwords. fixes #1765
| -rw-r--r-- | lib/plugins/authpdo/auth.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/plugins/authpdo/auth.php b/lib/plugins/authpdo/auth.php index 64ef94115..5eb70c95d 100644 --- a/lib/plugins/authpdo/auth.php +++ b/lib/plugins/authpdo/auth.php @@ -179,7 +179,7 @@ class auth_plugin_authpdo extends DokuWiki_Auth_Plugin { return $passhash->verify_hash($pass, $userdata['hash']); } else { // clear text password in the database O_o - return ($pass == $userdata['clear']); + return ($pass === $userdata['clear']); } } |