To prevent a bad password configuration from accidentally allowing users to bypass authentication, throw an exception if either hash or hash_pbkdf2 return false. Also, ensure md5() returned a sane hash. Bug: T127420 Change-Id: If3664941236e4065eb8db11b0a211fd6210de631 Signed-off-by: Chad Horohoe <chadh@wikimedia.org> |
||
|---|---|---|
| .. | ||
| BcryptPassword.php | ||
| EncryptedPassword.php | ||
| InvalidPassword.php | ||
| LayeredParameterizedPassword.php | ||
| MWOldPassword.php | ||
| MWSaltedPassword.php | ||
| ParameterizedPassword.php | ||
| Password.php | ||
| PasswordError.php | ||
| PasswordFactory.php | ||
| PasswordPolicyChecks.php | ||
| Pbkdf2Password.php | ||
| UserPasswordPolicy.php | ||