Changeset d28f3b35

Timestamp:

2006-06-18T23:07:28Z (19 years ago)

Author:

Wilmer van der Gaast <wilmer@…>

Branches:

master

Children:

d028a77

Parents:

10efa91

Message:

Now saving the password's md5sum instead of the plaintext version.

File:

• storage_xml.c (modified) (2 diffs)

storage_xml.c

@@ -26 +26 @@
 #define BITLBEE_CORE
 #include "bitlbee.h"
+#include "md5.h"
 
 typedef enum
@@ -81 +82 @@
                                      "Missing attributes for %s element", element_name );
                 }
-                else if( strcmp( nick, xd->given_nick ) == 0 &&
-                         strcmp( pass, xd->given_pass ) == 0 )
-                {
-                        if( xd->pass_st != XML_PASS_CHECK_ONLY )
-                                xd->pass_st = XML_PASS_OK;
-                }
                 else
                 {
-                        g_set_error( error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT,
-                                     XML_PASS_ERRORMSG );
+                        md5_byte_t pass_md5[16];
+                        md5_state_t md5_state;
+                        int pass_match, i, j;
+                        
+                        md5_init( &md5_state );
+                        md5_append( &md5_state, xd->given_pass, strlen( xd->given_pass ) );
+                        md5_finish( &md5_state, pass_md5 );
+                        
+                        for( i = 0; i < 16 && pass[i*2] && pass[i*2+1]; i ++ )
+                        {
+                                sscanf( pass + i * 2, "%2x", &j );
+                                if( j != pass_md5[i] )
+                                        break;
+                        }
+                        /* If we reached the end of the loop, it was a match! */
+                        pass_match = i == 16;
+                        
+                        if( strcmp( nick, xd->given_nick ) == 0 && pass_match )
+                        {
+                                if( xd->pass_st != XML_PASS_CHECK_ONLY )
+                                        xd->pass_st = XML_PASS_OK;
+                        }
+                        else
+                        {
+                                g_set_error( error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT,
+                                             XML_PASS_ERRORMSG );
+                        }
                 }
         }