Skip to content
Snippets Groups Projects
Commit d5c0422f authored by Andreas Gohr's avatar Andreas Gohr
Browse files

authpdo - use type safe comparison on passwords. fixes #1765

parent ea9ebb1c
No related branches found
No related tags found
No related merge requests found
......@@ -179,7 +179,7 @@ class auth_plugin_authpdo extends DokuWiki_Auth_Plugin {
return $passhash->verify_hash($pass, $userdata['hash']);
} else {
// clear text password in the database O_o
return ($pass == $userdata['clear']);
return ($pass === $userdata['clear']);
}
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment