Changeset 294 for trunk

Timestamp:

Dec 12, 2007 10:55:43 PM (16 years ago)

Author:

quinn

Message:

Changed signing routines so they always compare lower-case values.

File:

• trunk/lib/Utilities.inc.php (modified) (2 diffs)

trunk/lib/Utilities.inc.php

@@ -724 +724 @@
     }
 
-    return $val . '-' . mb_substr(md5($salt . md5($val . $salt)), 0, $length);
+    return $val . '-' . mb_strtolower(mb_substr(md5($salt . md5($val . $salt)), 0, $length));
 }
 
@@ -753 +753 @@
 function verifySignature($signed_val, $salt=null, $length=18)
 {
+    // All comparisons are done using lower-case strings.
+    $signed_val = mb_strtolower($signed_val);
     // Strip the value from the signed value.
     $val = removeSignature($signed_val);