diff --git a/lib/settings-common.php b/lib/settings-common.php index fbc6ec8..b3782ba 100644 --- a/lib/settings-common.php +++ b/lib/settings-common.php @@ -152,7 +152,7 @@ define('SALT_LENGTH',12); // Generate hash function generateHash($pw) { // Generate Bcrypt hash - return str_replace("\$", "\\$", password_hash($pw, PASSWORD_BCRYPT, $options = ['cost' => 10])); + return password_hash($pw, PASSWORD_BCRYPT, $options = ['cost' => 10]); } // Verify hash diff --git a/lib/settings-update.php b/lib/settings-update.php index 54e5c1a..bc21cb6 100644 --- a/lib/settings-update.php +++ b/lib/settings-update.php @@ -56,7 +56,12 @@ if (!$demoMode && isset($_SESSION['loggedIn']) && $_SESSION['loggedIn'] && isset $settingsNew .= '"'.$settingsArray[$i].'" => '; // Wrap certain values in double quotes $settingWrap = $settingsArray[$i]=="root"||$settingsArray[$i]=="password"||$settingsArray[$i]=="languageUser"||$settingsArray[$i]=="theme"||$settingsArray[$i]=="fontSize"||$settingsArray[$i]=="tagWrapperCommand"||$settingsArray[$i]=="autoComplete"||$settingsArray[$i]=="pluginPanelAligned"||$settingsArray[$i]=="githubAuthToken" ? '"' : ''; - $settingsNew .= $settingWrap.$ICEcoder[$settingsArray[$i]].$settingWrap.','.PHP_EOL; + + if ($settingsArray[$i]=="password") { + $settingsNew .= str_replace("\$", "\\$", $settingWrap.$ICEcoder[$settingsArray[$i]].$settingWrap.','.PHP_EOL); + } else { + $settingsNew .= $settingWrap.$ICEcoder[$settingsArray[$i]].$settingWrap.','.PHP_EOL; + } } // Compile our new settings