Add strict check to phpass's CheckPassword() method to avoid issues when the method is improperly called.
Merges [24457] to the 3.5 branch. git-svn-id: http://core.svn.wordpress.org/branches/3.5@24458 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
5b36ed4986
commit
14e91da99e
|
@ -253,7 +253,7 @@ class PasswordHash {
|
|||
if ($hash[0] == '*')
|
||||
$hash = crypt($password, $stored_hash);
|
||||
|
||||
return $hash == $stored_hash;
|
||||
return $hash === $stored_hash;
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue