Browse Source

Fix update password rehash

Fixes https://github.com/friendica/friendica/issues/4743
The logic for updating password was wrong:
b0a764b14c (diff-1466bb1a0a37fe9f7cf52eda8f3b431aR150)
pull/4782/head
Alexandre Alapetite 3 years ago
parent
commit
129f6806f6
1 changed files with 7 additions and 7 deletions
  1. +7
    -7
      src/Model/User.php

+ 7
- 7
src/Model/User.php View File

@ -127,18 +127,18 @@ class User
{
$user = self::getAuthenticationInfo($user_info);
if ($user['legacy_password']) {
if (password_verify(self::hashPasswordLegacy($password), $user['password'])) {
self::updatePassword($user['uid'], $password);
return $user['uid'];
}
} elseif (password_verify($password, $user['password'])) {
if (password_verify($password, $user['password'])) {
if (password_needs_rehash($user['password'], PASSWORD_DEFAULT)) {
self::updatePassword($user['uid'], $password);
}
return $user['uid'];
} elseif (!empty($user['legacy_password']) || strpos($user['password'], '$') === false) {
if (self::hashPasswordLegacy($password) === $user['password']) {
self::updatePassword($user['uid'], $password);
return $user['uid'];
}
}
throw new Exception(L10n::t('Login failed'));


Loading…
Cancel
Save