svn: /web/php-bugs/trunk/www/ bug-pwd-finder.php bug.php report.php
| From: | Felipe Pena | Date: | Fri, 01 Jul 2011 02:16:18 +0000 |
| Subject: | svn: /web/php-bugs/trunk/www/ bug-pwd-finder.php bug.php report.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-11411@lists.php.net to get a copy of this message | ||
felipe Fri, 01 Jul 2011 02:16:18 +0000
Revision: http://svn.php.net/viewvc?view=revision&revision=312746
Log:
- Change the hashing algo
Changed paths:
U web/php-bugs/trunk/www/bug-pwd-finder.php
U web/php-bugs/trunk/www/bug.php
U web/php-bugs/trunk/www/report.php
Modified: web/php-bugs/trunk/www/bug-pwd-finder.php
===================================================================
--- web/php-bugs/trunk/www/bug-pwd-finder.php 2011-07-01 00:47:57 UTC (rev 312745)
+++ web/php-bugs/trunk/www/bug-pwd-finder.php 2011-07-01 02:16:18 UTC (rev 312746)
@@ -42,7 +42,7 @@
'UPDATE bugdb
SET passwd = ?
WHERE id = ?
- ')->execute(array(sha1($new_passwd), $bug_id));
+ ')->execute(array(bugs_get_hash($new_passwd), $bug_id));
$resp = bugs_mail($row['email'],
"Password for {$siteBig} bug report #{$bug_id}",
Modified: web/php-bugs/trunk/www/bug.php
===================================================================
--- web/php-bugs/trunk/www/bug.php 2011-07-01 00:47:57 UTC (rev 312745)
+++ web/php-bugs/trunk/www/bug.php 2011-07-01 02:16:18 UTC (rev 312746)
@@ -245,7 +245,7 @@
} elseif (isset($_POST['in']) && !isset($_POST['preview']) &&
$edit == 2) {
// Edits submitted by original reporter for old bugs
- if (!verify_bug_passwd($bug_id, sha1($pw))) {
+ if (!verify_bug_passwd($bug_id, bugs_get_hash($pw))) {
$errors[] = 'The password you supplied was incorrect.';
} else {
// allow the original reporter to see the private report info
@@ -757,7 +757,7 @@
<form id="update" action="bug.php?id=<?php echo $bug_id;
?>&edit=<?php echo $edit; ?>" method="post">
<?php if ($edit == 2) {
- if (!isset($_POST['in']) && $pw &&
verify_bug_passwd($bug['id'], sha1($pw))) {
+ if (!isset($_POST['in']) && $pw &&
verify_bug_passwd($bug['id'], bugs_get_hash($pw))) {
$show_bug_info = true; ?>
<div class="explain">
Welcome back! Since you opted to store your bug's password in a
Modified: web/php-bugs/trunk/www/report.php
===================================================================
--- web/php-bugs/trunk/www/report.php 2011-07-01 00:47:57 UTC (rev 312745)
+++ web/php-bugs/trunk/www/report.php 2011-07-01 02:16:18 UTC (rev 312746)
@@ -195,7 +195,7 @@
$fdesc,
$_POST['in']['php_version'],
$_POST['in']['php_os'],
- sha1($_POST['in']['passwd']),
+ bugs_get_hash($_POST['in']['passwd']),
$_POST['in']['reporter_name'],
$is_private
)