From: Patrick Canterino <patrick@patrick-canterino.de>
Date: Mon, 16 Jun 2025 10:13:44 +0000 (+0200)
Subject: Compare stored hashes for admin and download password using hash_equals()
X-Git-Tag: 4.6.3~2^2
X-Git-Url: https://git.p6c8.net/jirafeau/pcanterino.git/commitdiff_plain/8c8f88ec2104ab0a12ceec4f5a8e2ebeb72758cc?hp=8c8f88ec2104ab0a12ceec4f5a8e2ebeb72758cc

Compare stored hashes for admin and download password using hash_equals()

This prevents timing attacks and attacks using Type Juggling

Originally proposed by onosh
---