Merge "Revert "Enable AuthManager by default""

[lhc/web/wiklou.git] / includes / password / MWOldPassword.php

diff --git a/includes/password/MWOldPassword.php b/includes/password/MWOldPassword.php
index 0ba407f..84675c1 100644 (file)
--- a/includes/password/MWOldPassword.php
+++ b/includes/password/MWOldPassword.php
@@ -28,7 +28,7 @@
  */
 class MWOldPassword extends ParameterizedPassword {
        protected function getDefaultParams() {
-               return array();
+               return [];
        }
 
        protected function getDelimiter() {
@@ -38,11 +38,15 @@ class MWOldPassword extends ParameterizedPassword {
        public function crypt( $plaintext ) {
                global $wgPasswordSalt;
 
-               if ( $wgPasswordSalt && count( $this->args ) == 1 ) {
+               if ( $wgPasswordSalt && count( $this->args ) === 1 ) {
                        $this->hash = md5( $this->args[0] . '-' . md5( $plaintext ) );
                } else {
-                       $this->args = array();
+                       $this->args = [];
                        $this->hash = md5( $plaintext );
                }
+
+               if ( !is_string( $this->hash ) || strlen( $this->hash ) < 32 ) {
+                       throw new PasswordError( 'Error when hashing password.' );
+               }
        }
 }