Wikimedia

Use hash_equals() in three places in MediaWiki's PasswordPolicyChecks.php

You should already have some basic understanding of PHP to work on this task. This task is about the MediaWiki core code repository.

$policyVal && $contLang->lc( $password ) === $contLang->lc( $username )

should use hash_equals() instead of === in the file /includes/password/PasswordPolicyChecks.php.

If you have specific questions, please also ask them in https://phabricator.wikimedia.org/T207777 as some folks might be able to help who are not registered on the GCI website!

You are expected to provide a patch in Wikimedia Gerrit. See https://www.mediawiki.org/wiki/Gerrit/Tutorial for how to set up Git and Gerrit.

Task tags

  • php

Students who completed this task

mogmog123

Task type

  • code Code
close

2018