From 82c0632f46e00a251d287811652429036d200eff Mon Sep 17 00:00:00 2001 From: Loz Calver Date: Wed, 26 Jul 2017 09:53:54 +0100 Subject: [PATCH] Fix: Use Config API for MemberAuthenticator::$migrate_legacy_hashes (fixes #7208) --- security/MemberAuthenticator.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/security/MemberAuthenticator.php b/security/MemberAuthenticator.php index bfa6a6f49..29005bb35 100644 --- a/security/MemberAuthenticator.php +++ b/security/MemberAuthenticator.php @@ -161,9 +161,10 @@ class MemberAuthenticator extends Authenticator { // when we can rehash passwords to a different hashing algorithm, // bulk-migration doesn't work due to the nature of hashing. // See PasswordEncryptor_LegacyPHPHash class. - if($success && $member && isset(self::$migrate_legacy_hashes[$member->PasswordEncryption])) { + $migrateLegacyHashes = self::config()->migrate_legacy_hashes; + if($success && $member && isset($migrateLegacyHashes[$member->PasswordEncryption])) { $member->Password = $data['Password']; - $member->PasswordEncryption = self::$migrate_legacy_hashes[$member->PasswordEncryption]; + $member->PasswordEncryption = $migrateLegacyHashes[$member->PasswordEncryption]; $member->write(); }