Make cleartext authentication case sensitive. Thanks jhurliman for spotting this.

This commit is contained in:
Dahlia Trimble
2009-06-27 07:49:10 +00:00
parent 2d173d7556
commit 147c9bcd45
5 changed files with 7 additions and 7 deletions

View File

@@ -234,7 +234,7 @@ namespace OpenSim.Framework.Communications.Services
string s = Util.Md5Hash(password + ":" + profile.PasswordSalt);
bool loginresult = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
return loginresult;
}
}

View File

@@ -769,8 +769,8 @@ namespace OpenSim.Framework.Communications.Services
//m_log.Info("[LOGIN]: userprofile:" + profile.passwordHash + " SubCT:" + password);
passwordSuccess = (profile.PasswordHash.Equals(s.ToString(), StringComparison.InvariantCultureIgnoreCase)
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCultureIgnoreCase));
|| profile.PasswordHash.Equals(password, StringComparison.InvariantCulture));
return passwordSuccess;
}