[ticket/10708] Check converted passwords for multi-byte characters

Check for multi-byte characters in converted passwords.

PHPBB3-10708
This commit is contained in:
Richard Foote 2012-03-19 23:19:21 -04:00
parent 81eeafbb8d
commit 70d88965c7

View file

@ -163,7 +163,7 @@ function login_db($username, $password, $ip = '', $browser = '', $forwarded_for
$password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;
$password_new_format = '';
set_var($password_new_format, stripslashes($password_old_format), 'string');
set_var($password_new_format, stripslashes($password_old_format), 'string', true);
if ($password == $password_new_format)
{