From 85881358cbab4b73bcebdbc79cee1e7adce479eb Mon Sep 17 00:00:00 2001 From: Nils Adermann Date: Mon, 14 May 2007 20:08:11 +0000 Subject: [PATCH] - always use convert error message for unconverted incorrect passwords [Bug #10893] git-svn-id: file:///svn/phpbb/trunk@7576 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/includes/auth/auth_db.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php index e0df8cdc92..6df378b00a 100644 --- a/phpBB/includes/auth/auth_db.php +++ b/phpBB/includes/auth/auth_db.php @@ -126,7 +126,7 @@ function login_db(&$username, &$password) $row['user_pass_convert'] = 0; $row['user_password'] = md5($password_new_format); } - else if (preg_match('/[\x80-\xFF]/', $password_old_format)) + else { // Although we weren't able to convert this password we have to // increase login attempt count to make sure this cannot be exploited