#255 Update code to 2.6.4

merge-requests/2/head
Mike Koch 9 years ago
parent 139853e0d4
commit e84c27fa16

@ -380,7 +380,7 @@ function hesk_activeSessionValidate($username, $password_hash, $tag)
list($salt, $hash) = explode('|', $tag, 2);
// Make sure the hash matches existing username and password
if ($hash == sha1($salt . $username . $password_hash) )
if ($hash == sha1($salt . strtolower($username) . $password_hash) )
{
return true;
}
@ -392,7 +392,7 @@ function hesk_activeSessionValidate($username, $password_hash, $tag)
function hesk_activeSessionCreateTag($username, $password_hash)
{
$salt = uniqid(mt_rand(), true);
return $salt . '|' . sha1($salt . $username . $password_hash);
return $salt . '|' . sha1($salt . strtolower($username) . $password_hash);
} // END hesk_activeSessionCreateTag()

Loading…
Cancel
Save