diff --git a/app/Http/Controllers/Passport/AuthController.php b/app/Http/Controllers/Passport/AuthController.php index 506c307d..423bd33e 100644 --- a/app/Http/Controllers/Passport/AuthController.php +++ b/app/Http/Controllers/Passport/AuthController.php @@ -256,6 +256,7 @@ class AuthController extends Controller } $user->password = password_hash($request->input('password'), PASSWORD_DEFAULT); $user->password_algo = NULL; + $user->password_salt = NULL; if (!$user->save()) { abort(500, __('Reset failed')); } diff --git a/app/Http/Controllers/User/UserController.php b/app/Http/Controllers/User/UserController.php index b390e61b..b781e6a0 100755 --- a/app/Http/Controllers/User/UserController.php +++ b/app/Http/Controllers/User/UserController.php @@ -43,6 +43,7 @@ class UserController extends Controller } $user->password = password_hash($request->input('new_password'), PASSWORD_DEFAULT); $user->password_algo = NULL; + $user->password_salt = NULL; if (!$user->save()) { abort(500, __('Save failed')); } diff --git a/app/Utils/Helper.php b/app/Utils/Helper.php index 214da102..1a928b61 100644 --- a/app/Utils/Helper.php +++ b/app/Utils/Helper.php @@ -69,7 +69,7 @@ class Helper switch($algo) { case 'md5': return md5($password) === $hash; case 'sha256': return hash('sha256', $password) === $hash; - case 'mws': return md5($password . $salt) === $hash; + case 'md5salt': return md5($password . $salt) === $hash; default: return password_verify($password, $hash); } }