PMCORE-2298 Password is stored in plain text when is hashed via G::encrypt and it contains a pipe (|)

2021-02-04 18:07:47 -04:00
parent f5d434ffdf
commit 4711d6687d
10 changed files with 81 additions and 65 deletions
--- a/gulliver/system/class.rbac.php
+++ b/gulliver/system/class.rbac.php
@@ -1762,6 +1762,7 @@ class RBAC
        $dataCase['AUTH_SOURCE_PASSWORD'] = G::encrypt(
                $dataCase['AUTH_SOURCE_PASSWORD'],
                $dataCase['AUTH_SOURCE_SERVER_NAME']
+                ,false, false
            ) . "_2NnV3ujj3w";
        $this->authSourcesObj->create($dataCase);
    }
@@ -1780,6 +1781,7 @@ class RBAC
        $dataCase['AUTH_SOURCE_PASSWORD'] = G::encrypt(
                $dataCase['AUTH_SOURCE_PASSWORD'],
                $dataCase['AUTH_SOURCE_SERVER_NAME']
+                , false, false
            ) . "_2NnV3ujj3w";
        $this->authSourcesObj->update($dataCase);
    }