From 2b17ad907715bd08da615bc14bade44a17d71457 Mon Sep 17 00:00:00 2001 From: Franco Fichtner Date: Tue, 25 Aug 2015 16:40:31 +0200 Subject: [PATCH] auth: remove naughty nt-hash Reported by: @lattera Reviewed by: @AdSchellevis --- src/etc/inc/auth.inc | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/src/etc/inc/auth.inc b/src/etc/inc/auth.inc index 4c9bb3e4d..ba2e39f3c 100644 --- a/src/etc/inc/auth.inc +++ b/src/etc/inc/auth.inc @@ -489,7 +489,7 @@ function local_user_del($user) local_group_del_user($user); } -function local_user_set_password(& $user, $password) +function local_user_set_password(&$user, $password) { $user['password'] = crypt($password, '$6$'); @@ -500,9 +500,6 @@ function local_user_set_password(& $user, $password) $a = ord($astr{$i}) << 8; $ustr.= sprintf("%X", $a); } - - // Generate the NT-HASH from the unicode string - $user['nt-hash'] = bin2hex(hash("md4", $ustr)); } function local_user_get_groups($user, $all = false)