From 4fdf9626fb21c22965905281d487540f545f330c Mon Sep 17 00:00:00 2001 From: Sascha Greuel Date: Fri, 3 May 2019 12:15:03 +0200 Subject: [PATCH] Fixed password comparison --- wcfsetup/install/files/lib/util/PasswordUtil.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/util/PasswordUtil.class.php b/wcfsetup/install/files/lib/util/PasswordUtil.class.php index e0da9dc88f..3e9e8e0f9b 100644 --- a/wcfsetup/install/files/lib/util/PasswordUtil.class.php +++ b/wcfsetup/install/files/lib/util/PasswordUtil.class.php @@ -588,7 +588,7 @@ final class PasswordUtil { * @return boolean */ protected static function wcf2($username, $password, $salt, $dbHash) { - return CryptoUtil::secureCompare($dbHash, self::getDoubleSaltedHash($password, $salt)); + return CryptoUtil::secureCompare($dbHash, self::getDoubleSaltedHash($password, $dbHash)); } /** -- 2.20.1