From 39829ca6a1f23d07cd59798a2717725748cb23d0 Mon Sep 17 00:00:00 2001 From: rudy Date: Wed, 11 Jan 2023 10:30:24 +0100 Subject: [PATCH] fix verify password methode ssha --- src/Security/Hasher/PasswordEncoder.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Security/Hasher/PasswordEncoder.php b/src/Security/Hasher/PasswordEncoder.php index 2317acf..5edaf71 100644 --- a/src/Security/Hasher/PasswordEncoder.php +++ b/src/Security/Hasher/PasswordEncoder.php @@ -47,8 +47,8 @@ class PasswordEncoder implements LegacyPasswordHasherInterface $completedPassword = $this->getPasswordToHash($plainPassword, $salt); foreach ($this->hashAlgoLegacy as $algo) { - if ('ssha' === $algo) { - return $this->compareSsha($hashedPassword, $completedPassword); + if ('ssha' === $algo && $this->compareSsha($hashedPassword, $completedPassword)) { + return true; } if ($this->isObsoleteAlgo($algo)) { if (hash_equals(hash($algo, $completedPassword), $hashedPassword)) {