Skip the password hashing cost recheck if it's been disabled

This commit is contained in:
Starbeamrainbowlabs 2018-05-10 23:30:00 +01:00
parent 1cc92ba260
commit 41ea63281c
Signed by: sbrl
GPG Key ID: 1BE5172E637709C2
1 changed files with 4 additions and 1 deletions

View File

@ -153,7 +153,10 @@ function do_password_hash_code_update() {
// There's no point if we're using Argon2i, as it doesn't take a cost
if(hash_password_properties()["algorithm"] == PASSWORD_ARGON2I)
return;
// Skip rechecking if the automatic check has been disabled
if($settings->password_cost_time_interval == -1)
return;
// Skip the recheck if we've done one recently
if(isset($settings->password_cost_time_lastcheck) &&
time() - $settings->password_cost_time_lastcheck < $settings->password_cost_time_interval)