Changeset 24466 for trunk/wp-login.php

Timestamp:

06/21/2013 03:00:26 AM (12 years ago)

Author:

nacin

Message:

Validate post password hash.

File:

• trunk/wp-login.php (modified) (1 diff)

trunk/wp-login.php

@@ -408 +408 @@
 
 case 'postpass' :
-    if ( empty( $wp_hasher ) ) {
-        require_once( ABSPATH . 'wp-includes/class-phpass.php' );
-        // By default, use the portable hash from phpass
-        $wp_hasher = new PasswordHash(8, true);
-    }
+    require_once ABSPATH . 'wp-includes/class-phpass.php';
+    $hasher = new PasswordHash( 8, true );
 
     // 10 days
-    setcookie( 'wp-postpass_' . COOKIEHASH, $wp_hasher->HashPassword( wp_unslash( $_POST['post_password'] ) ), time() + 10 * DAY_IN_SECONDS, COOKIEPATH );
+    setcookie( 'wp-postpass_' . COOKIEHASH, $hasher->HashPassword( wp_unslash( $_POST['post_password'] ) ), time() + 10 * DAY_IN_SECONDS, COOKIEPATH );
 
     wp_safe_redirect( wp_get_referer() );