Просмотр исходного кода

#491 alert for password hash generation

Alleha 10 лет назад
Родитель
Сommit
5576545e57
2 измененных файлов с 17 добавлено и 2 удалено
  1. 7 0
      inc/profiles.inc.php
  2. 10 2
      template/scripts/BxBaseFormAccount.php

+ 7 - 0
inc/profiles.inc.php

@@ -179,6 +179,13 @@ function bx_check_password($sLogin, $sPassword, $iRole = BX_DOL_ROLE_MEMBER)
 
     $sPassCheck = encryptUserPwd($sPassword, $aAccountInfo['salt']);
 
+	// regenerate password using another encrypt function if necessary
+	bx_alert('system', 'encrypt_password_after', 0, false, array(
+            'info' => $aAccountInfo,
+			'pwd' => $sPassword,
+            'password' => &$sPassCheck,
+        ));		
+	
     if ($sErrorMsg = bx_check_login($aAccountInfo['id'], $sPassCheck, $iRole))
         return $sErrorMsg;
 

+ 10 - 2
template/scripts/BxBaseFormAccount.php

@@ -27,8 +27,16 @@ class BxFormAccountCheckerHelper extends BxDolFormCheckerHelper
             return false;
 
         $aInfo = $oAccount->getInfo();
-
-        return $aInfo['password'] == encryptUserPwd($s, $aInfo['salt']);
+		$sPassCheck == encryptUserPwd($s, $aInfo['salt']);
+		
+		// regenerate password using another encrypt function if necessary
+		bx_alert('system', 'encrypt_password_after', 0, false, array(
+            'info' => $aInfo,
+			'pwd' => $s,
+            'password' => &$sPassCheck,
+        ));
+		
+		return $aInfo['password'] == $sPassCheck;
     }
 
     /**