fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-02 08:42:15 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix truncated password hash for documents and comments written by non-members, if member module is configured to use a hashing algorithm that produces more than 60 chars

Browse source
This commit is contained in:
Kijin Sung 2023-06-19 01:59:27 +09:00
parent 10cd76d0be
commit f34c27c26b
3 changed files with 31 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

27
common/framework/Password.php
View file

@ -138,6 +138,33 @@ class Password
return $algorithm;
}
/**
* Get the current default hashing algorithm, unless it will produce
* hashes that are longer than 60 characters.
*
* In that case, this method returns the next best supported algorithm
* that produces 60-character (or shorter) hashes. This helps maintain
* compatibility with old tables that still have varchar(60) columns.
*
* @return string
*/
public static function getBackwardCompatibleAlgorithm()
{
$algorithm = self::getDefaultAlgorithm();
if (!in_array($algorithm, ['bcrypt', 'pbkdf2', 'sha1', 'md5']))
{
$candidates = self::getSupportedAlgorithms();
foreach ($candidates as $algorithm)
{
if (in_array($algorithm, ['bcrypt', 'pbkdf2', 'sha1', 'md5']))
{
return $algorithm;
}
}
}
return $algorithm;
}
/**
* Get the currently configured work factor for bcrypt and other adjustable algorithms.
*