[PHPBB3-13917] Use hash_equals() if possible in password driver helper - phpBB Tracker

XML

Word

Printable

Details

Type: Security Issue
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 3.1.4
Fix Version/s: 3.1.5-RC1
Component/s: Authentication
Labels:
None

Description

We should be using PHP's hash_equals() function if it's available.

Attachments

Activity

People

Assignee:: Marc

Reporter:: Marc

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/Jun/15 2:48 PM

Updated:: 07/Jul/15 4:17 PM

Resolved:: 07/Jul/15 4:17 PM