From 74d0b2797498b1a2351c11a6fa827c82b2b9e2f6 Mon Sep 17 00:00:00 2001 From: mcmlxxix <> Date: Thu, 5 Nov 2015 19:52:46 +0000 Subject: [PATCH] toUppercase() passwords retrieved from User object when comparing to client hash in ident() methods... because I dunno --- exec/json-service.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/exec/json-service.js b/exec/json-service.js index 4f25ed91be..2d8389c12b 100644 --- a/exec/json-service.js +++ b/exec/json-service.js @@ -298,9 +298,9 @@ chat = new (function() { return false; } var usr = new User(usernum); - var pass = md5_calc(usr.security.password,true); + var pass = md5_calc(usr.security.password.toUpperCase(),true); - if(md5_calc(usr.security.password,true) != pw) { + if(md5_calc(usr.security.password.toUpperCase(),true) != pw) { error(client,errors.INVALID_PASSWORD); return false; } @@ -408,7 +408,7 @@ admin = new (function() { return false; } var usr = new User(usernum); - if(md5_calc(usr.security.password,true) != pw) { + if(md5_calc(usr.security.password.toUpperCase(),true) != pw) { error(client,errors.INVALID_PASSWORD); return false; } -- GitLab