Feeling Lucky
?
[#8400] - Beef up JCryptPasswordSimple to match JUserHelper
- Closed
- 13 Nov 2015
- Medium
- Build: staging
- # 8400
- Diff
- mbabker:JCryptPassword-beef-up
- Pending Human Test Results: 1 Successful 0 Failed. Details
User tests: Successful: Unsuccessful:
JCryptPasswordSimple's password verification function is inherently weak (most likely since it was never implemented into the CMS) from a security perspective. This patch beefs it up to validate passwords with similar logic as used in JUserHelper::verifyPassword() for the hashes that it supports.
As this code is unimplemented in the CMS, you'll need to trust the unit tests here.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Labels |
Added:
?
|
||
wilsonge
- | Status | Pending | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2015-11-13 17:54:28 |
| Closed_By | ⇒ | wilsonge |
| Milestone |
Added: |
||
I have tested this item
successfully on 78232f2
The passwords are still verified correctly.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/8400.