mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-08-11 20:30:23 +00:00
Double hash password in cookies.
git-svn-id: https://develop.svn.wordpress.org/trunk@1788 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
+1
-1
@@ -159,7 +159,7 @@ default:
|
||||
if ($log && $pwd) {
|
||||
if ( wp_login($log, $pwd) ) {
|
||||
$user_login = $log;
|
||||
$user_pass = md5($pwd);
|
||||
$user_pass = md5(md5($pwd)); // Double hash the password in the cookie.
|
||||
setcookie('wordpressuser_'. COOKIEHASH, $user_login, time() + 31536000, COOKIEPATH);
|
||||
setcookie('wordpresspass_'. COOKIEHASH, $user_pass, time() + 31536000, COOKIEPATH);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user