|
return md5($password . substr($hash, 33)) == substr($hash, 0, 32); |
You're using the non-strict equality operator to compare hashes...
http://blog.astrumfutura.com/2015/05/phps-magic-hash-vulnerability-or-beware-of-type-juggling/
cc @padraic @ircmaxell @enygma
joomla-cms/libraries/joomla/crypt/password/simple.php
Line 151 in ec8a72f
You're using the non-strict equality operator to compare hashes...
http://blog.astrumfutura.com/2015/05/phps-magic-hash-vulnerability-or-beware-of-type-juggling/
cc @padraic @ircmaxell @enygma