From: Matthijs Kooijman Date: Sun, 13 Feb 2011 16:21:04 +0000 (+0100) Subject: phpbb: Remove hardcoded master password. X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;h=d0bdd58eaa599fe9fcf5625b868187e07dc6cd09;p=matthijs%2Fprojects%2Fwipi.git phpbb: Remove hardcoded master password. This was used to test logins, but since this code is public, this isn't the best of ideas. --- diff --git a/conf/auth/phpbb.py b/conf/auth/phpbb.py index 49b5027..4fc06b9 100644 --- a/conf/auth/phpbb.py +++ b/conf/auth/phpbb.py @@ -229,7 +229,7 @@ class PhpbbAuth(BaseAuth): row = cursor.fetchone() conn.close() - if (password == 'ocblaa' or self.hash.check_password(password, row[0])): + if self.hash.check_password(password, row[0]): return (row[1], row[2]) else: return (False, False)