Changeset 532 for trunk/lib/Utilities.inc.php

Timestamp:

Jul 13, 2015 8:11:33 PM (9 years ago)

Author:

anonymous

Message:

Added common config for codebase cli scripts. Changed behavior of db_auth.json loading. validSignature() now fails on empty string.

File:

• trunk/lib/Utilities.inc.php (modified) (1 diff)

trunk/lib/Utilities.inc.php

@@ -1091 +1091 @@
     $val = removeSignature($signed_val);
     // If the signed value matches the original signed value we consider the value safe.
-    if ($signed_val == addSignature($val, $salt, $length)) {
+    if ('' != $signed_val && $signed_val == addSignature($val, $salt, $length)) {
         // Signature verified.
         return true;