Replace password hash check with password_verify

This commit is contained in:
Naiel
2026-01-26 10:18:45 +01:00
committed by GitHub
parent 04dfa477d2
commit d1f41a19c9

View File

@@ -13,7 +13,7 @@ if (str_starts_with($ua, "SysAdminAuth/")) {
header("HTTP/1.1 403 Forbidden"); header("HTTP/1.1 403 Forbidden");
die(); die();
} }
if ($userdata["password"] !== hash("sha256", $userpass)) { if (password_verify($userpass, $userdata["password"])) {
header("HTTP/1.1 403 Forbidden"); header("HTTP/1.1 403 Forbidden");
die(); die();
} }