From b75d922f4d30b14200c202e838f56597b5fdd1c3 Mon Sep 17 00:00:00 2001 From: robocoder Date: Thu, 7 Jul 2011 10:25:09 +0000 Subject: refs #308 - mb.func_override friendly git-svn-id: http://dev.piwik.org/svn/trunk@5003 59fd770c-687e-43c8-a1e3-f5a4ff64c105 --- plugins/Login/Controller.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'plugins/Login') diff --git a/plugins/Login/Controller.php b/plugins/Login/Controller.php index d6679b249e..f72d56a36b 100644 --- a/plugins/Login/Controller.php +++ b/plugins/Login/Controller.php @@ -27,10 +27,10 @@ class Piwik_Login_Controller extends Piwik_Controller private function generateHash($userInfo, $password) { // mitigate rainbow table attack - $password = str_split($password, (strlen($password)/2)+1); + $passwordLen = strlen($password) / 2; $hash = Piwik_Common::hash( - $userInfo . $password[0] - . Piwik_Common::getSalt() . $password[1] + $userInfo . substr($password, 0, $passwordLen) + . Piwik_Common::getSalt() . substr($password, $passwordLen) ); return $hash; } -- cgit v1.2.3