Merge remote-tracking branch 'origin/master'

[jirafeau_mojo42.git] / admin.php

diff --git a/admin.php b/admin.php
index 62fd5eee86eacbc8b3c9a7eb9adc30b6a5e00387..cb6058036bee37b11b8ada637b07e71d5fd028f6 100644 (file)
--- a/admin.php
+++ b/admin.php
@@ -70,7 +70,8 @@ else
   /* Check classic admin password authentification. */
   if (isset ($_POST['admin_password']) && empty($cfg['admin_http_auth_user']))
   {
   /* Check classic admin password authentification. */
   if (isset ($_POST['admin_password']) && empty($cfg['admin_http_auth_user']))
   {

-      if ($cfg['admin_password'] === $_POST['admin_password'])
+      if ($cfg['admin_password'] === $_POST['admin_password'] ||
+          $cfg['admin_password'] === hash('sha256', $_POST['admin_password']))

           $_SESSION['admin_auth'] = true;
       else
       {
           $_SESSION['admin_auth'] = true;
       else
       {