From 329088dc35906a88a8d1b73caa238ebcb0955ee6 Mon Sep 17 00:00:00 2001 From: Henrik Nordstrom Date: Tue, 13 Jul 2010 22:42:09 +0200 Subject: [PATCH] Correct Joomla DB auth handling Found while reading the code. Original clearly could not have worked as it split the password field using an uninitialized delimiter. --- helpers/basic_auth/DB/basic_db_auth.pl.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/helpers/basic_auth/DB/basic_db_auth.pl.in b/helpers/basic_auth/DB/basic_db_auth.pl.in index 9a809e1264..481961bedc 100644 --- a/helpers/basic_auth/DB/basic_db_auth.pl.in +++ b/helpers/basic_auth/DB/basic_db_auth.pl.in @@ -142,7 +142,7 @@ sub check_password($$) if ($isjoomla){ my $salt; my $key2; - ($key2,$salt) = split (/$salt/, $key); + ($key2,$salt) = plit (/:/, $key); return 1 if md5_hex($password.$salt).':'.$salt eq $key; } else{ -- 2.47.2