* [FIX] Solves #394. Fixed the Blowfish salt length to 22 chars long. Thanks to @ipshenicyn for the feedback.

2026-03-05 08:04:09 +01:00 · 2017-01-31 11:43:04 +01:00
parent 1aa1f12f6d
commit dc0610b868
1 changed files with 1 additions and 1 deletions
--- a/inc/SP/Core/Crypt.class.php
+++ b/inc/SP/Core/Crypt.class.php
@@ -285,7 +285,7 @@ class Crypt
            $salt = Config::getConfig()->getPasswordSalt();
        }

-        $salt = '$2y$07$' . $salt . '$';
+        $salt = '$2y$07$' . substr($salt, 0, 21) . '$';

        return substr(crypt($string, $salt), 7, 32);
    }