[phpldapadmin] [ phpldapadmin-Bugs-2958613 ] password_checker.php md5crypt explode() function bug

Bugs item #2958613, was opened at 2010-02-25 18:33
Message generated for change (Tracker Item Submitted) made by kemenatar
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2958613&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 1.2.x
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Hyungmin Park (kemenatar)
Assigned to: Nobody/Anonymous (nobody)
Summary: password_checker.php md5crypt explode() function bug

Initial Comment:
Dear developers,

I encountered some bugs from htdocs/password_checker.php and lib/functions.php files.
My server configurations are as follow:
phpLDAPAdmin version 1.2.0.5
OpenLDAP Server 2.4.14
php5-ldap 5.2.12
Apache 2.2.24
FreeBSD 7.0 STABLE

Here's the detail:

In the file "lib/functions.php", line around 2299:

list($type, $salt, $hash) = explode('$', $cryptedpassword);
But, the variable $cryptedpassword contains something like '$1$blahblah$iwannabeapopstar'
Therefore, the value $type would contain '',
$salt would contain 1 and $hash would be 'blahblah'.

The expected values are:
$type = "1", $salt="blahblah" and, $hash="iwannabeapopstar".

So, I guess that the code should fixed like this:

list($dummy, $type, $salt, $hash) = explode('$', ..........).

That's all.
Have a nice day.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2958613&group_id=61828

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/