Surplus_Up (2DU) před 7 roky
rodič
revize
8860b4c99d
1 změnil soubory, kde provedl 6 přidání a 1 odebrání
  1. 6 1
      app.py

+ 6 - 1
app.py

@@ -2644,7 +2644,12 @@ def change_password():
                 if not user:
                 if not user:
                     return re_error('/error/10')
                     return re_error('/error/10')
 
 
-                if not bcrypt.checkpw(bytes(flask.request.form.get('pw', None), 'utf-8'), bytes(user[0][0], 'utf-8')):
+                salt = bcrypt.gensalt()
+                
+                hashed = bytes(user[0][0], 'utf-8')
+                hashed.find(salt)
+
+                if not hashed == bcrypt.hashpw(bytes(flask.request.form.get('pw', None), 'utf-8'), hashed):
                     return re_error('/error/2')
                     return re_error('/error/2')
 
 
                 hashed = bcrypt.hashpw(bytes(flask.request.form.get('pw2', None), 'utf-8'), bcrypt.gensalt()).decode()
                 hashed = bcrypt.hashpw(bytes(flask.request.form.get('pw2', None), 'utf-8'), bcrypt.gensalt()).decode()