Whats up with this ?
Seems like the comparison is allowing any 'ole case to cause the cfif compare to be
'true'.
cfset asod = tobinary(theUser.pw)
cfset asod = tostring(asod)
cfset asod = cfusion_Decrypt(asod, Hash(UCase(theUser.UserName)))
cfif asod EQ Attributes.password
cfset
Whats up with this ?
Seems like the comparison is allowing any 'ole case to cause
the cfif compare to be 'true'.
cfset asod = tobinary(theUser.pw)
cfset asod = tostring(asod)
cfset asod = cfusion_Decrypt(asod, Hash(UCase(theUser.UserName)))
cfif asod EQ Attributes.password
cfset
2 matches
Mail list logo