From: Joshua Rüsweg <ruesweg@woltlab.com>
Date: Sun, 14 Jun 2020 15:02:00 +0000 (+0200)
Subject: Improve \hash_equals call
X-Git-Tag: 5.3.0_Alpha_1~182^2~7
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=becaee046e73284d74aadaacb82d40bd6386786c;p=GitHub%2FWoltLab%2FWCF.git

Improve \hash_equals call

Co-authored-by: Tim Düsterhus <duesterhus@woltlab.com>
---

diff --git a/wcfsetup/install/files/lib/form/RegisterActivationForm.class.php b/wcfsetup/install/files/lib/form/RegisterActivationForm.class.php
index e01d196f3b..5a12caa2ae 100644
--- a/wcfsetup/install/files/lib/form/RegisterActivationForm.class.php
+++ b/wcfsetup/install/files/lib/form/RegisterActivationForm.class.php
@@ -83,7 +83,7 @@ class RegisterActivationForm extends AbstractForm {
 		}
 		
 		// check given activation code
-		if (!\hash_equals($this->activationCode, $this->user->emailConfirmed)) {
+		if (!\hash_equals($this->user->emailConfirmed, $this->activationCode)) {
 			throw new UserInputException('activationCode', 'invalid');
 		}