diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/permissions.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/permissions.py b/modules/permissions.py index e24f6ea0..e620f46f 100644 --- a/modules/permissions.py +++ b/modules/permissions.py @@ -67,7 +67,7 @@ class Module(ModuleManager.BaseModule): hash, salt = self._get_hash(event["server"], account) if hash and salt: attempt, _ = self._make_hash(password, salt) - if attempt == hash: + if utils.security.constant_time_compare(attempt, hash): self._identified(event["server"], event["user"], account) event["stdout"].write("Correct password, you have " "been identified as '%s'." % account) |