Changes from trunk/src/wp-includes/pluggable.php at r26388 to branches/3.8/src/wp-includes/pluggable.php at r28054

File:

• branches/3.8/src/wp-includes/pluggable.php (modified) (1 diff)

branches/3.8/src/wp-includes/pluggable.php

@@ -544 +544 @@
         $hash = hash_hmac('md5', $username . '|' . $expiration, $key);
 
-        if ( $hmac != $hash ) {
+        if ( hash_hmac( 'md5', $hmac, $key ) !== hash_hmac( 'md5', $hash, $key ) ) {
                 do_action('auth_cookie_bad_hash', $cookie_elements);
                 return false;