mirror of
https://github.com/opensim/opensim.git
synced 2026-08-04 16:22:50 +08:00
Make cleartext authentication case sensitive. Thanks jhurliman for spotting this.
This commit is contained in:
@@ -119,7 +119,7 @@ namespace OpenSim.Client.Linden
|
||||
string s = Util.Md5Hash(password + ":" + profile.PasswordSalt);
|
||||
|
||||
bool loginresult = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
|
||||
return loginresult;
|
||||
}
|
||||
}
|
||||
|
||||
@@ -540,8 +540,8 @@ namespace OpenSim.Client.MXP.PacketHandler
|
||||
password = password.Remove(0, 3); //remove $1$
|
||||
string s = Util.Md5Hash(password + ":" + userProfile.PasswordSalt);
|
||||
return (userProfile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|
||||
|| userProfile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|
||||
}
|
||||
|| userProfile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
|
||||
}
|
||||
else
|
||||
{
|
||||
return true;
|
||||
|
||||
@@ -234,7 +234,7 @@ namespace OpenSim.Framework.Communications.Services
|
||||
string s = Util.Md5Hash(password + ":" + profile.PasswordSalt);
|
||||
|
||||
bool loginresult = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
|
||||
return loginresult;
|
||||
}
|
||||
}
|
||||
|
||||
@@ -769,8 +769,8 @@ namespace OpenSim.Framework.Communications.Services
|
||||
//m_log.Info("[LOGIN]: userprofile:" + profile.passwordHash + " SubCT:" + password);
|
||||
|
||||
passwordSuccess = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|
||||
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
|
||||
|
||||
return passwordSuccess;
|
||||
}
|
||||
|
||||
|
||||
@@ -126,7 +126,7 @@ namespace OpenSim.Services.AuthenticationService
|
||||
//m_log.Info("[LOGIN]: userprofile:" + profile.passwordHash + " SubCT:" + password);
|
||||
|
||||
passwordSuccess = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|
||||
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
|
||||
|
||||
return passwordSuccess;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user