mirror of
https://github.com/Ysurac/openmptcprouter-vps-admin.git
synced 2025-03-09 15:40:05 +00:00
Fix timing attacks potential vulnerability
This commit is contained in:
parent
2694612565
commit
a01cbc8c3d
1 changed files with 1 additions and 1 deletions
|
@ -776,7 +776,7 @@ with open('/etc/openmptcprouter-vps-admin/omr-admin-config.json') as f:
|
||||||
fake_users_db = omr_config_data['users'][0]
|
fake_users_db = omr_config_data['users'][0]
|
||||||
|
|
||||||
def verify_password(plain_password, user_password):
|
def verify_password(plain_password, user_password):
|
||||||
if plain_password == user_password:
|
if secrets.compare_digest(plain_password,user_password):
|
||||||
LOG.debug("password true")
|
LOG.debug("password true")
|
||||||
return True
|
return True
|
||||||
return False
|
return False
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue