From 3bbf770e3365b8ce43d336dd96fbde925d3bac65 Mon Sep 17 00:00:00 2001 From: Benjamin Renard Date: Tue, 28 Mar 2023 12:28:45 +0200 Subject: [PATCH] LSaddon::accesslog: fix hashing SSHA512 password (in hashPasswordForLogs()) --- src/includes/addons/LSaddons.accesslog.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/includes/addons/LSaddons.accesslog.php b/src/includes/addons/LSaddons.accesslog.php index 7cc7c717..fbc74532 100644 --- a/src/includes/addons/LSaddons.accesslog.php +++ b/src/includes/addons/LSaddons.accesslog.php @@ -353,7 +353,7 @@ function hashPasswordForLogs($password) { if(defined('MHASH_SHA512') && function_exists('mhash') && function_exists('mhash_keygen_s2k')) { mt_srand( (double) microtime() * 1000000 ); $salt = mhash_keygen_s2k(MHASH_SHA512, $password, substr( pack( "h*", md5( mt_rand() ) ), 0, 8 ), 4 ); - return "{SSHA512}".base64_encode(mhash($mhash_type, $password.$salt).$salt); + return "{SSHA512}".base64_encode(mhash(MHASH_SHA512, $password.$salt).$salt); } return '[not logged]'; }