1
0
mirror of https://github.com/anope/anope.git synced 2026-06-27 08:26:38 +02:00

Reject passwords bigger than Bcrypt can handle.

This commit is contained in:
Sadie Powell
2025-01-25 17:54:49 +00:00
parent 9bab54af79
commit d460b267e3
+4
View File
@@ -118,6 +118,10 @@ public:
EventReturn OnEncrypt(const Anope::string &src, Anope::string &dest) override
{
// Bcrypt can not generate passwords longer than 71 characters.
if (src.length() > 71)
return EVENT_CONTINUE;
dest = "bcrypt:" + bcryptprovider.Encrypt(src);
Log(LOG_DEBUG_2) << "(enc_bcrypt) hashed password from [" << src << "] to [" << dest << "]";
return EVENT_ALLOW;