Browse Source

#255 Update code to 2.6.4

merge-requests/2/head
Mike Koch 7 years ago
parent
commit
e84c27fa16
  1. 4
      inc/admin_functions.inc.php

4
inc/admin_functions.inc.php

@ -380,7 +380,7 @@ function hesk_activeSessionValidate($username, $password_hash, $tag)
list($salt, $hash) = explode('|', $tag, 2);
// Make sure the hash matches existing username and password
if ($hash == sha1($salt . $username . $password_hash) )
if ($hash == sha1($salt . strtolower($username) . $password_hash) )
{
return true;
}
@ -392,7 +392,7 @@ function hesk_activeSessionValidate($username, $password_hash, $tag)
function hesk_activeSessionCreateTag($username, $password_hash)
{
$salt = uniqid(mt_rand(), true);
return $salt . '|' . sha1($salt . $username . $password_hash);
return $salt . '|' . sha1($salt . strtolower($username) . $password_hash);
} // END hesk_activeSessionCreateTag()

Loading…
Cancel
Save