From 597588f4b362ca65b96a103350530cfeeb52cf66 Mon Sep 17 00:00:00 2001 From: Markus Uhlin Date: Sat, 23 Dec 2023 15:52:53 +0100 Subject: Fixed salt --- FICS/comproc.c | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/FICS/comproc.c b/FICS/comproc.c index c27b787..f4b8eab 100644 --- a/FICS/comproc.c +++ b/FICS/comproc.c @@ -537,7 +537,7 @@ com_password(int p, param_list param) { char *oldpassword = param[0].val.word; char *newpassword = param[1].val.word; - char salt[3]; + char salt[6]; if (!parray[p].registered) { pprintf(p, "Setting a password is only for registered players." @@ -546,9 +546,12 @@ com_password(int p, param_list param) } if (parray[p].passwd) { - salt[0] = parray[p].passwd[0]; - salt[1] = parray[p].passwd[1]; - salt[2] = '\0'; + salt[0] = '$'; + salt[1] = '1'; + salt[2] = '$'; + salt[3] = parray[p].passwd[0]; + salt[4] = parray[p].passwd[1]; + salt[5] = '\0'; if (strcmp(crypt(oldpassword, salt), parray[p].passwd)) { pprintf(p, "Incorrect password, password not changed!" @@ -560,9 +563,12 @@ com_password(int p, param_list param) parray[p].passwd = NULL; } - salt[0] = ('a' + rand() % 26); - salt[1] = ('a' + rand() % 26); - salt[2] = '\0'; + salt[0] = '$'; + salt[1] = '1'; + salt[2] = '$'; + salt[3] = ('a' + rand() % 26); + salt[4] = ('a' + rand() % 26); + salt[5] = '\0'; parray[p].passwd = xstrdup(crypt(newpassword, salt)); pprintf(p, "Password changed to \"%s\".\n", newpassword); -- cgit v1.2.3