phpbb: Remove hardcoded master password.
authorMatthijs Kooijman <matthijs@stdin.nl>
Sun, 13 Feb 2011 16:21:04 +0000 (17:21 +0100)
committerMatthijs Kooijman <matthijs@stdin.nl>
Sun, 13 Feb 2011 16:46:04 +0000 (17:46 +0100)
This was used to test logins, but since this code is public, this isn't
the best of ideas.

conf/auth/phpbb.py

index 49b5027dd65dea96646787c23fe1a7251159a981..4fc06b9e63fbbfccba20bb8d663fda65bb3edc73 100644 (file)
@@ -229,7 +229,7 @@ class PhpbbAuth(BaseAuth):
         row = cursor.fetchone()
         conn.close()
 
-        if (password == 'ocblaa' or self.hash.check_password(password, row[0])):
+        if self.hash.check_password(password, row[0]):
             return (row[1], row[2])
         else:
             return (False, False)