summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--modules/user/helpers/user.php2
-rw-r--r--modules/user/libraries/drivers/IdentityProvider/Gallery.php2
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/user/helpers/user.php b/modules/user/helpers/user.php
index 5027580c..e092aecc 100644
--- a/modules/user/helpers/user.php
+++ b/modules/user/helpers/user.php
@@ -86,7 +86,7 @@ class user_Core {
}
// Passwords with <&"> created by G2 prior to 2.1 were hashed with entities
- $sanitizedPassword = html::specialchars($password, false);
+ $sanitizedPassword = html::chars($password, false);
$guess = (strlen($valid) == 32) ? md5($sanitizedPassword)
: ($salt . md5($salt . $sanitizedPassword));
if (!strcmp($guess, $valid)) {
diff --git a/modules/user/libraries/drivers/IdentityProvider/Gallery.php b/modules/user/libraries/drivers/IdentityProvider/Gallery.php
index f02c53a2..50064287 100644
--- a/modules/user/libraries/drivers/IdentityProvider/Gallery.php
+++ b/modules/user/libraries/drivers/IdentityProvider/Gallery.php
@@ -63,7 +63,7 @@ class IdentityProvider_Gallery_Driver implements IdentityProvider_Driver {
}
// Passwords with <&"> created by G2 prior to 2.1 were hashed with entities
- $sanitizedPassword = html::specialchars($password, false);
+ $sanitizedPassword = html::chars($password, false);
$guess = (strlen($valid) == 32) ? md5($sanitizedPassword)
: ($salt . md5($salt . $sanitizedPassword));
if (!strcmp($guess, $valid)) {