diff --git a/interface/web/login/index.php b/interface/web/login/index.php index 951dbaf29c097551379b3438ee0c54460bda9e51..8043280ceffa07e20150f2596f654084599d90ac 100644 --- a/interface/web/login/index.php +++ b/interface/web/login/index.php @@ -197,6 +197,13 @@ class login_index { //* The password is crypt-md5 encrypted $salt = '$1$'.substr($saved_password, 3, 8).'$'; + if(crypt(stripslashes($passwort), $salt) != $saved_password) { + $user = false; + } + } elseif(substr($saved_password, 0, 3) == '$5$') { + //* The password is crypt-md5 encrypted + $salt = '$5$'.substr($saved_password, 3, 16).'$'; + if(crypt(stripslashes($passwort), $salt) != $saved_password) { $user = false; }