Ticket #1928: phpBB-pass_arrayhash.diff

phpBB.php

@@ -435 +435 @@
   * @return bool Returns true if the password is correct, false if not.
   */
  public function authenticate_pass($password, $serialized_pass) {
+    $password = md5($password);
    $itoa64 = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
    $pass_array = unserialize($serialized_pass);
-   if (strlen($pass_array['hash']) == 34) {        
-     return ($this->_hash_crypt_private($password, $pass_array['hash'], $itoa64) === $pass_array['hash']) ? true : false;
+   if (strlen($pass_arrayhash?) == 34) {       
+     return ($this->_hash_crypt_private($password, $pass_arrayhash?, $itoa64) === $pass_arrayhash?) ? true : false;
    }
  
-   return (md5($password) === $pass_array['hash']) ? true : false;
+   return (md5($password) === $pass_arrayhash?) ? true : false;
  }
  
  /**