public/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-01-07 05:59:17 +00:00
Code Issues Releases Wiki Activity

[Web] Validate plain md5 hashes, closes #3017

Browse Source
This commit is contained in:
andryyy
2019-10-08 17:36:28 +02:00
parent 1580e4b2a5
commit 80a9c39956
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
data/web/inc/functions.inc.php
View File

@@ -386,6 +386,12 @@ function verify_hash($hash, $password) {
return true;
}
}
elseif (preg_match('/^{PLAIN-MD5}/i', $hash)) {
$hash = preg_replace('/^{PLAIN-MD5}/i', '', $hash);
if (md5($password) == $hash) {
return true;
}
}
elseif (preg_match('/^{SHA512-CRYPT}/i', $hash)) {
// Remove tag if any
$hash = preg_replace('/^{SHA512-CRYPT}/i', '', $hash);