[Web] Verify additional password hashes (only SHA512-CRYPT is supported today)

2018-07-12 00:24:23 +02:00
parent 2aef18d130
commit 2f270f3b9b
2 changed files with 32 additions and 22 deletions
--- a/data/web/inc/functions.domain_admin.inc.php
+++ b/data/web/inc/functions.domain_admin.inc.php
@@ -318,7 +318,7 @@ function domain_admin($_action, $_data = null) {
            WHERE `username` = :user");
        $stmt->execute(array(':user' => $username));
        $row = $stmt->fetch(PDO::FETCH_ASSOC);
-        if (!verify_ssha256($row['password'], $password_old)) {
+        if (!verify_hash($row['password'], $password_old)) {
          $_SESSION['return'] = array(
            'type' => 'danger',
            'msg' => sprintf($lang['danger']['access_denied'])
@@ -504,4 +504,4 @@ function domain_admin($_action, $_data = null) {
      return $domainadmindata;
    break;
  }
-}
+}