fix(authentication): security fix on password comparision

OCSInventory-NG · Jun 13, 2024 · af2da8d · af2da8d
1 parent 44c9e9e
commit af2da8d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/AUTH/methode/local.php b/backend/AUTH/methode/local.php
@@ -68,7 +68,7 @@
         }
     }
 
-    if ($login_status == true || (isset($rowOp->PASSWD) && hash(PASSWORD_CRYPT, $mdp) == $rowOp->PASSWD)) {
+    if ($login_status == true || (isset($rowOp->PASSWD) && hash(PASSWORD_CRYPT, $mdp) === $rowOp->PASSWD)) {
         $login_successful = "OK";
         $user_group = $rowOp->USER_GROUP;
         $type_log = 'CONNEXION';