Make cleartext authentication case sensitive. Thanks jhurliman for spotting this.

This commit is contained in:
Dahlia Trimble
2009-06-27 07:49:10 +00:00
parent 2d173d7556
commit 147c9bcd45
5 changed files with 7 additions and 7 deletions

View File

@@ -540,8 +540,8 @@ namespace OpenSim.Client.MXP.PacketHandler
password = password.Remove(0, 3); //remove $1$
string s = Util.Md5Hash(password + ":" + userProfile.PasswordSalt);
return (userProfile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|| userProfile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
}
|| userProfile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
}
else
{
return true;