wiki.techinc.nl/includes/password
csteipp f91e47ce9e SECURITY: Throw exception on unknown hash algorithm
To prevent a bad password configuration from accidentally allowing
users to bypass authentication, throw an exception if either hash or
hash_pbkdf2 return false.

Also, ensure md5() returned a sane hash.

Bug: T127420
Change-Id: If3664941236e4065eb8db11b0a211fd6210de631

Signed-off-by: Chad Horohoe <chadh@wikimedia.org>
2016-05-20 09:48:59 -07:00
..
BcryptPassword.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
EncryptedPassword.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
InvalidPassword.php
LayeredParameterizedPassword.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
MWOldPassword.php SECURITY: Throw exception on unknown hash algorithm 2016-05-20 09:48:59 -07:00
MWSaltedPassword.php SECURITY: Throw exception on unknown hash algorithm 2016-05-20 09:48:59 -07:00
ParameterizedPassword.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
Password.php
PasswordError.php
PasswordFactory.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
PasswordPolicyChecks.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
Pbkdf2Password.php SECURITY: Throw exception on unknown hash algorithm 2016-05-20 09:48:59 -07:00
UserPasswordPolicy.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00